Read the docs

AWS

Records384All Threatist records
Exploited (KEV)2In CISA KEV
CVSS critical46CVSS 9.0–10.0
CVSS high198CVSS 7.0–8.9

Exploited now

AWS records in CISA KEV
TI-2026-23989 Linux Kernel Incorrect Resource Transfer Between Spheres Vulnerability Priority CRITICAL 93KEV 2026-05-01TI-2023-23979 HTTP/2 Rapid Reset Attack Vulnerability Priority CRITICAL 90KEV 2023-10-10

Components

Products in the NVD configurations · select one to filter the records
Freertos 21 records MEDIUM Amazon Web Services Freertos 14 records MEDIUM Fire Os 13 records MEDIUM Opensearch 11 records HIGH Tough 10 records MEDIUM Freertos-plus-tcp 9 records MEDIUM Blink Xt2 Sync Module Firmware 7 records MEDIUM Athena Odbc 6 records MEDIUM

Records

7 records in Blink Xt2 Sync Module Firmware · all components

TI-2019-02989 CVE-2019-3984 · GHSA-xpcw-jp98-6h3c

OS command injection in AWS Blink XT2 Sync Module firmware

Priority MEDIUM 49

Blink XT2 Sync Module firmware prior to 2.13.11 allows remote attackers to execute arbitrary commands on the device due to improperly sanitized input when the device retrieves updates scripts from the internet.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03769 Published 2019-12-31 Fixed in 2.13.11 CWE-78
TI-2019-02994 CVE-2019-3989 · GHSA-7x9h-v86g-f4f5

OS command injection in Amazon's Blink XT2 Sync Module

Priority MEDIUM 48

Blink XT2 Sync Module firmware prior to 2.13.11 allows remote attackers to execute arbitrary commands on the device due to improperly sanitized input when retrieving internal network configuration data.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03731 Published 2019-12-11 No fix listed CWE-78
TI-2019-02993 CVE-2019-3988 · GHSA-mqfh-r3g8-g7vm

OS command injection in Amazon's Blink XT2 Sync Module

Priority MEDIUM 41

Blink XT2 Sync Module firmware prior to 2.13.11 allows remote attackers to execute arbitrary commands on the device due to improperly sanitized input when configuring the devices wifi configuration via the bssid paramete…

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.01664 Published 2019-12-11 No fix listed CWE-78
TI-2019-02992 CVE-2019-3987 · GHSA-4rh7-2jj4-cgm5

OS command injection in Amazon's Blink XT2 Sync Module

Priority MEDIUM 41

Blink XT2 Sync Module firmware prior to 2.13.11 allows remote attackers to execute arbitrary commands on the device due to improperly sanitized input when configuring the devices wifi configuration via the key parameter.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.01664 Published 2019-12-11 No fix listed CWE-78
TI-2019-02990 CVE-2019-3985 · GHSA-x2c9-5qpf-9c5w

OS command injection in Amazon's Blink XT2 Sync Module

Priority MEDIUM 41

Blink XT2 Sync Module firmware prior to 2.13.11 allows remote attackers to execute arbitrary commands on the device due to improperly sanitized input when configuring the devices wifi configuration via the ssid parameter…

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.01664 Published 2019-12-11 No fix listed CWE-78
TI-2019-02991 CVE-2019-3986 · GHSA-w256-88g9-rh8j

OS command injection in Amazon's Blink XT2 Sync Module

Priority MEDIUM 40

Blink XT2 Sync Module firmware prior to 2.13.11 allows remote attackers to execute arbitrary commands on the device due to improperly sanitized input when configuring the devices wifi configuration via the encryption par…

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.01208 Published 2019-12-11 No fix listed CWE-78
TI-2019-02988 CVE-2019-3983 · GHSA-qc4p-vcpx-mm6g

Hard-coded credentials in Amazon's Blink XT2 Sync Module

Priority LOW 32

Blink XT2 Sync Module firmware prior to 2.13.11 allows remote attackers to execute arbitrary code and commands on the device due to insufficient UART protections.

CVSS 3.1MEDIUM 6.8 Physical No auth No interaction EPSS 0.01022 Published 2019-12-11 No fix listed CWE-798
Open these records in search →