Vendor archive

bestbuy CVEs

Beta · best-effort

3 CVEs tagged to vendor bestbuy — 0 Critical, 1 High, 2 Medium, 0 Low, 0 Unrated.

See this archive with more filters View vendor evidence profile Explore

CVE-2023-1385

Published May 3, 2023

Improper JPAKE implementation allows offline PIN brute-forcing due to the initialization of random values to a known value, which leads to unauthorized authentication to amzn.ligh…

CVSS 7.1 · High

Vendor/product tagsBeta · best-effort

CVE-2023-1384

Published May 3, 2023

The setMediaSource function on the amzn.thin.pl service does not sanitize the "source" parameter allowing for arbitrary javascript code to be run This issue affects: Amazon Fire…

CVSS 4.3 · Medium

Vendor/product tagsBeta · best-effort

CVE-2023-1383

Published May 3, 2023

An Improper Enforcement of Behavioral Workflow vulnerability in the exchangeDeviceServices function on the amzn.dmgr service allowed an attacker to register services that are only…

CVSS 5.4 · Medium

Vendor/product tagsBeta · best-effort

Showing 1-3 of 3 CVEsPage 1 of 1