[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f6pYJJZPz2CJjDns0V6WBvTztwRXP_D6o9ArRgTGCqC0":3,"g5a-risk:CVE-2023-33248":142},{"success":4,"data":5,"meta":139},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":34,"epssPercentile":27,"epssTimeSeries":35,"severity":36,"affectedProducts":37,"affectedProductsCount":47,"references":48,"referencesCount":88,"weaknesses":89,"weaknessesCount":93,"isActivelyExploited":94,"cisaInfo":27,"otxData":27,"relatedBlogPosts":95,"seoMetadata":96,"configurations":121,"relatedVendorCves":137,"notableEvents":138},"CVE-2023-33248","What is CVE-2023-33248?","Amazon Alexa software version 8960323972 on Echo Dot 2nd generation and 3rd generation devices potentially allows attackers to deliver security-relevant commands via an audio signal between 16 and 22 kHz (often outside the range of human adult hearing). Commands at these frequencies are essentially never spoken by authorized actors, but a substantial fraction of the commands are successful.","Amazon Alexa software version 8960323972 on Echo Dot 2nd generation and 3rd generation devices potentially allows attackers to deliver security-relevant comm...","2023-05-24T22:15:09.207","2025-01-16T16:15:29.63",7.6,"CVSS:3.1\u002FAV:A\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:L\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":27,"CVSSMetricV2":27,"CVSSMetricV40":27},[16,30],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":28,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":22,"IntegrityImpact":26,"AvailabilityImpact":26,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":26,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"3.1","ADJACENT_NETWORK","LOW","NONE","REQUIRED","UNCHANGED","HIGH",null,2.1,5.5,{"Source":31,"Type":32,"CVSSData":33,"ExploitabilityScore":28,"ImpactScore":29},"134c704f-9b21-4f2e-91b3-4a467353bcc0","Secondary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":22,"IntegrityImpact":26,"AvailabilityImpact":26,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":26,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},0.00668,[34,34,34,34,34,34,34],"High",[38,43],{"vendor":39,"product":40,"version":41,"criteria":42,"vulnerable":4},"amazon","alexa","8960323972","cpe:2.3:o:amazon:alexa:8960323972:*:*:*:*:*:*:*",{"vendor":39,"product":44,"version":45,"criteria":46,"vulnerable":4},"echo_dot","-","cpe:2.3:h:amazon:echo_dot:-:*:2nd_gen:*:*:*:*:*",2,[49,54,58,63,67,72,76,78,80,82,84,86],{"url":50,"source":51,"tags":52},"https:\u002F\u002Farxiv.org\u002Fabs\u002F2305.10358","Arxiv",[53],"Third Party Advisory",{"url":55,"source":56,"tags":57},"https:\u002F\u002Fcios2023.org\u002Fpapers","Cios2023",[53],{"url":59,"source":60,"tags":61},"https:\u002F\u002Fgithub.com\u002Freveondivad\u002Fnuance","GitHub",[62,53],"Exploit",{"url":64,"source":65,"tags":66},"https:\u002F\u002Fsites.google.com\u002Fview\u002Fnuitattack\u002Fhome","Google",[53],{"url":68,"source":69,"tags":70},"https:\u002F\u002Fwww.usenix.org\u002Fsystem\u002Ffiles\u002Fsec23fall-prepub-261-xia-qi.pdf","Usenix",[62,71,53],"Technical Description",{"url":73,"source":74,"tags":75},"https:\u002F\u002Fyoutu.be\u002F3gEc5ZFWIWo","Youtu",[62,71,53],{"url":50,"source":51,"tags":77},[53],{"url":55,"source":56,"tags":79},[53],{"url":59,"source":60,"tags":81},[62,53],{"url":64,"source":65,"tags":83},[53],{"url":68,"source":69,"tags":85},[62,71,53],{"url":73,"source":74,"tags":87},[62,71,53],12,[90],{"id":91,"name":91,"description":92},"Unknown","NVD-CWE-noinfo",1,false,[],{"title":97,"metaDescription":98,"keywords":99,"canonicalUrl":100,"structuredData":101},"What is CVE-2023-33248? Vulnerability Analysis | Security Advisory | EdgeProtect","Comprehensive analysis of CVE-2023-33248, a high severity cyber security vulnerability from 2023. Amazon Alexa software version 8960323972 on Echo Dot 2nd ge...","CVE-2023-33248, CVE-2023-33248 vulnerability, CVE-2023-33248 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2023, CVSS score, exploit, patch, remediation, amazon security, alexa vulnerability, echo_dot vulnerability","\u002Fwhat-is\u002Fcve-2023-33248",{"@context":102,"@type":103,"headline":97,"description":98,"datePublished":10,"dateModified":11,"author":104,"publisher":108,"about":112,"mainEntityOfPage":116,"articleSection":119,"keywords":120},"https:\u002F\u002Fschema.org","TechArticle",{"@type":105,"name":106,"url":107},"Organization","EdgeProtect","https:\u002F\u002Fedgeprotect.io",{"@type":105,"name":106,"url":107,"logo":109},{"@type":110,"url":111},"ImageObject","https:\u002F\u002Fedgeprotect.io\u002Fimg\u002Flogos\u002Fedgeprotect-logo-512.png",{"@type":113,"name":6,"description":114,"additionalType":115},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":117,"@id":118},"WebPage","https:\u002F\u002Fedgeprotect.io\u002Fwhat-is\u002Fcve-2023-33248","Cybersecurity","CVE-2023-33248, CVE-2023-33248 vulnerability, CVE-2023-33248 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[122],{"Operator":123,"Negate":27,"Nodes":124},"AND",[125,130],{"Operator":126,"Negate":27,"CPEMatch":127},"OR",[128],{"Vulnerable":4,"Criteria":42,"MatchCriteriaID":129,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"8A43F757-D8D2-450E-9454-6AEB1E417E34",{"Operator":126,"Negate":27,"CPEMatch":131},[132,134],{"Vulnerable":27,"Criteria":46,"MatchCriteriaID":133,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"23FBCB3B-2917-4AFC-8C67-976C2EDFAC68",{"Vulnerable":27,"Criteria":135,"MatchCriteriaID":136,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"cpe:2.3:h:amazon:echo_dot:-:*:3rd_gen:*:*:*:*:*","F6999715-5BAE-48C6-A5C9-E00B89AE7104",[],[],{"lastModified":11,"cacheTime":140,"version":141},1793227959749,"2.0",{"score":143,"band":144,"action":145,"scoredAt":146},44,"Medium","Plan remediation","2026-10-28T06:57:36.088387+00:00"]