[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fEu-14tAMWaSGqx2EXWWZSuDCUODCQFOscx-eRoq77uY":3,"g5a-risk:CVE-2023-1385":127},{"success":4,"data":5,"meta":124},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":36,"epssPercentile":26,"epssTimeSeries":37,"severity":38,"affectedProducts":39,"affectedProductsCount":53,"references":54,"referencesCount":60,"weaknesses":61,"weaknessesCount":60,"isActivelyExploited":70,"cisaInfo":26,"otxData":26,"relatedBlogPosts":71,"seoMetadata":72,"configurations":97,"relatedVendorCves":122,"notableEvents":123},"CVE-2023-1385","What is CVE-2023-1385?","Improper JPAKE implementation allows offline PIN brute-forcing due to the initialization of random values to a known value, which leads to unauthorized authentication to amzn.lightning services.\n\nThis issue affects:\n\nAmazon Fire TV Stick 3rd gen versions prior to 6.2.9.5.\nInsignia TV with FireOS 7.6.3.3.","Improper JPAKE implementation allows offline PIN brute-forcing due to the initialization of random values to a known value, which leads to unauthorized authe...","2023-05-03T13:15:10.29","2023-05-12T16:07:46.433",8.8,"CVSS:3.1\u002FAV:A\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":26,"CVSSMetricV2":26,"CVSSMetricV40":26},[16,29],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":25,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.1","ADJACENT_NETWORK","LOW","NONE","UNCHANGED","HIGH",null,2.8,5.9,{"Source":30,"Type":31,"CVSSData":32,"ExploitabilityScore":27,"ImpactScore":35},"cve-requests@bitdefender.com","Secondary",{"Version":20,"VectorString":33,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":22,"AvailabilityImpact":23,"BaseScore":34,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":23,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"CVSS:3.1\u002FAV:A\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:L\u002FA:N",7.1,4.2,0.00332,[36,36,36,36,36,36,36],"High",[40,45,49],{"vendor":41,"product":42,"version":43,"criteria":44,"vulnerable":4},"amazon","fire_os","*","cpe:2.3:o:amazon:fire_os:*:*:*:*:*:*:*:*",{"vendor":41,"product":46,"version":47,"criteria":48,"vulnerable":4},"fire_tv_stick_3rd_gen","-","cpe:2.3:h:amazon:fire_tv_stick_3rd_gen:-:*:*:*:*:*:*:*",{"vendor":50,"product":51,"version":47,"criteria":52,"vulnerable":4},"bestbuy","insignia_tv","cpe:2.3:h:bestbuy:insignia_tv:-:*:*:*:*:*:*:*",3,[55],{"url":56,"source":57,"tags":58},"https:\u002F\u002Fwww.bitdefender.com\u002Fblog\u002Flabs\u002Fvulnerabilities-identified-amazon-fire-tv-stick-insignia-fire-os-tv-series\u002F","Bitdefender",[59],"Third Party Advisory",1,[62],{"id":63,"name":64,"description":65,"extendedDescription":66,"status":67,"abstraction":68,"structure":69},"CWE-330","Use of Insufficiently Random Values","The product uses insufficiently random numbers or values in a security context that depends on unpredictable numbers.","When product generates predictable values in a context requiring unpredictability, it may be possible for an attacker to guess the next value that will be generated, and use this guess to impersonate another user or access sensitive information.","Stable","Class","Simple",false,[],{"title":73,"metaDescription":74,"keywords":75,"canonicalUrl":76,"structuredData":77},"What is CVE-2023-1385? Vulnerability Analysis | Security Advisory | EdgeProtect","Comprehensive analysis of CVE-2023-1385, a high severity cyber security vulnerability from 2023. Improper JPAKE implementation allows offline PIN brute-forci...","CVE-2023-1385, CVE-2023-1385 vulnerability, CVE-2023-1385 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2023, CVSS score, exploit, patch, remediation, amazon security, bestbuy security, fire_os vulnerability, fire_tv_stick_3rd_gen vulnerability, insignia_tv vulnerability","\u002Fwhat-is\u002Fcve-2023-1385",{"@context":78,"@type":79,"headline":73,"description":74,"datePublished":10,"dateModified":11,"author":80,"publisher":84,"about":88,"mainEntityOfPage":92,"articleSection":95,"keywords":96},"https:\u002F\u002Fschema.org","TechArticle",{"@type":81,"name":82,"url":83},"Organization","EdgeProtect","https:\u002F\u002Fedgeprotect.io",{"@type":81,"name":82,"url":83,"logo":85},{"@type":86,"url":87},"ImageObject","https:\u002F\u002Fedgeprotect.io\u002Fimg\u002Flogos\u002Fedgeprotect-logo-512.png",{"@type":89,"name":6,"description":90,"additionalType":91},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":93,"@id":94},"WebPage","https:\u002F\u002Fedgeprotect.io\u002Fwhat-is\u002Fcve-2023-1385","Cybersecurity","CVE-2023-1385, CVE-2023-1385 vulnerability, CVE-2023-1385 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[98,111],{"Operator":99,"Negate":26,"Nodes":100},"AND",[101,107],{"Operator":102,"Negate":26,"CPEMatch":103},"OR",[104],{"Vulnerable":4,"Criteria":44,"MatchCriteriaID":105,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":106,"VersionEndIncluding":26},"155C81F2-B65A-49BB-8546-C4BAD0E15709","6.2.9.5",{"Operator":102,"Negate":26,"CPEMatch":108},[109],{"Vulnerable":26,"Criteria":48,"MatchCriteriaID":110,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"B9D6A7B7-D971-4EBE-9749-C80AF6A6F0D0",{"Operator":99,"Negate":26,"Nodes":112},[113,118],{"Operator":102,"Negate":26,"CPEMatch":114},[115],{"Vulnerable":4,"Criteria":44,"MatchCriteriaID":116,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":117,"VersionEndIncluding":26},"020E0ED7-C54D-438F-B2A0-A6471400479E","7.6.3.3",{"Operator":102,"Negate":26,"CPEMatch":119},[120],{"Vulnerable":26,"Criteria":52,"MatchCriteriaID":121,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"F4942064-0B54-4FEA-96E1-9B5ED7CC8E96",[],[],{"lastModified":11,"cacheTime":125,"version":126},1793246038515,"2.0",{"score":128,"band":129,"action":130,"scoredAt":131},46,"Medium","Plan remediation","2026-10-28T06:57:23.104137+00:00"]