Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

7 records

Vendor: AWS Component: Blink Xt2 Sync Module Firmware Clear all filters
TI-2019-02989 CVE-2019-3984 · GHSA-xpcw-jp98-6h3c

OS command injection in AWS Blink XT2 Sync Module firmware

Priority MEDIUM 49

Blink XT2 Sync Module firmware prior to 2.13.11 allows remote attackers to execute arbitrary commands on the device due to improperly sanitized input when the device retrieves updates scripts from the internet.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03769 Published 2019-12-31 Fixed in 2.13.11 CWE-78
TI-2019-02988 CVE-2019-3983 · GHSA-qc4p-vcpx-mm6g

Hard-coded credentials in Amazon's Blink XT2 Sync Module

Priority LOW 32

Blink XT2 Sync Module firmware prior to 2.13.11 allows remote attackers to execute arbitrary code and commands on the device due to insufficient UART protections.

CVSS 3.1MEDIUM 6.8 Physical No auth No interaction EPSS 0.01022 Published 2019-12-11 No fix listed CWE-798
TI-2019-02990 CVE-2019-3985 · GHSA-x2c9-5qpf-9c5w

OS command injection in Amazon's Blink XT2 Sync Module

Priority MEDIUM 41

Blink XT2 Sync Module firmware prior to 2.13.11 allows remote attackers to execute arbitrary commands on the device due to improperly sanitized input when configuring the devices wifi configuration via the ssid parameter…

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.01664 Published 2019-12-11 No fix listed CWE-78
TI-2019-02991 CVE-2019-3986 · GHSA-w256-88g9-rh8j

OS command injection in Amazon's Blink XT2 Sync Module

Priority MEDIUM 40

Blink XT2 Sync Module firmware prior to 2.13.11 allows remote attackers to execute arbitrary commands on the device due to improperly sanitized input when configuring the devices wifi configuration via the encryption par…

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.01208 Published 2019-12-11 No fix listed CWE-78
TI-2019-02992 CVE-2019-3987 · GHSA-4rh7-2jj4-cgm5

OS command injection in Amazon's Blink XT2 Sync Module

Priority MEDIUM 41

Blink XT2 Sync Module firmware prior to 2.13.11 allows remote attackers to execute arbitrary commands on the device due to improperly sanitized input when configuring the devices wifi configuration via the key parameter.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.01664 Published 2019-12-11 No fix listed CWE-78
TI-2019-02993 CVE-2019-3988 · GHSA-mqfh-r3g8-g7vm

OS command injection in Amazon's Blink XT2 Sync Module

Priority MEDIUM 41

Blink XT2 Sync Module firmware prior to 2.13.11 allows remote attackers to execute arbitrary commands on the device due to improperly sanitized input when configuring the devices wifi configuration via the bssid paramete…

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.01664 Published 2019-12-11 No fix listed CWE-78
TI-2019-02994 CVE-2019-3989 · GHSA-7x9h-v86g-f4f5

OS command injection in Amazon's Blink XT2 Sync Module

Priority MEDIUM 48

Blink XT2 Sync Module firmware prior to 2.13.11 allows remote attackers to execute arbitrary commands on the device due to improperly sanitized input when retrieving internal network configuration data.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03731 Published 2019-12-11 No fix listed CWE-78