Amazon Vulnérabilités

Chronologie

Taper

Not Defined42
Tablet Operating System14
Programming Language Software4
Artificial Intelligence Software4
Automation Software4

Produit

Amazon Kindle Fire HD7
Amazon Fire OS3
Amazon Azure API Management3
Amazon Fire TV Stick 3rd Gen3
Amazon Insignia TV3

Contre-mesures

Official Fix41
Temporary Fix0
Workaround1
Unavailable2
Not Defined30

Exploitabilité

High1
Functional0
Proof-of-Concept3
Unproven2
Not Defined68

Vecteur d'accès

Not Defined0
Physical1
Local15
Adjacent23
Network35

Authentification

Not Defined0
High1
Low35
None38

Interaction de l'utilisateur

Not Defined0
Required6
None68

C3BM Index

CVSSv3 Base

≤10
≤21
≤30
≤49
≤55
≤618
≤724
≤810
≤95
≤102

CVSSv3 Temp

≤10
≤21
≤30
≤49
≤56
≤625
≤717
≤810
≤95
≤101

VulDB

≤10
≤21
≤32
≤48
≤510
≤625
≤712
≤813
≤91
≤102

NVD

≤10
≤20
≤30
≤41
≤52
≤62
≤73
≤814
≤95
≤102

CNA

≤10
≤20
≤30
≤40
≤51
≤61
≤71
≤82
≤92
≤100

Fournisseur

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Exploiter 0 jour

<1k20
<2k33
<5k21
<10k0
<25k0
<50k0
<100k0
≥100k0

Exploiter aujourd'hui

<1k72
<2k2
<5k0
<10k0
<25k0
<50k0
<100k0
≥100k0

Exploiter le volume du marché

🔴 CTI Activités

Affected Products (53): AWS (1), AWS Amplify CLI (1), AWS Apache Log4j Hotpatch Package (1), AWS App Runner (2), AWS CloudFormation Bootstrap Tools (1), AWS CloudFront (1), AWS CodeBuild (1), AWS Cognito (1), AWS Console (1), AWS Control Tower (1), AWS Directory Service (1), AWS ECR (1), AWS Encryption SDK (1), AWS Encryption SDK for Java (1), AWS Firecracker (1), AWS IAM (1), AWS Java SDK (1), AWS JavaScript S3 Explorer (1), AWS Redshift JDBC Driver (1), AWS SDK (1), AWS Service Catalog (1), AWS VPN Client (2), Alexa (1), Audible (1), Azure API Management (3), Echo (1), Echo Dot (3), Echo Show (1), Echo Spot (1), Elastic Load Balancing API Tools (1), Fire OS (3), Fire TV Stick 3rd Gen (3), Flexible Payments Service (1), FreeRTOS (2), Insignia TV (3), Key (1), Kindle (3), Kindle App (1), Kindle Fire HD (7), Kindle Touch (2), Kindle for PC (1), Linux (2), Linux AMI (2), Music Player (1), Ring Doorbell (1), Simple Notification Service (1), Web Services CLI (1), Web Services FreeRTOS (3), WorkSpaces Agent (2), WorkSpaces Client (2), amazon-ssm-agent (1), ion-java (1), merchant SDK (1)

PubliéBaseTempVulnérabilitéProdExpConEPSSCTICVE
15/04/20246.36.0Amazon AWS Amplify CLI authentification faibleInconnueNot DefinedOfficial Fix0.000450.13CVE-2024-28056
25/02/20244.54.3Amazon Fire OS Android Debug Bridge elévation de privilègesInconnueNot DefinedOfficial Fix0.000450.05CVE-2024-27350
19/01/20243.93.9Amazon AWS Encryption SDK for Java ECDSA Signature authentification faibleProgramming Language SoftwareNot DefinedOfficial Fix0.000520.04CVE-2024-23680
04/01/20247.57.3amazon-ion ion-java dénie de serviceProgramming Language SoftwareNot DefinedOfficial Fix0.000460.04CVE-2024-21634
09/10/20233.33.2Amazon WorkSpaces Client divulgation de l'informationInconnueNot DefinedOfficial Fix0.000000.08
04/10/20235.05.0Amazon Simple Notification Service Signature Validation authentification faibleInconnueNot DefinedNot Defined0.000000.02
11/08/20236.36.0Amazon Linux AMI CA-Certificate authentification faibleInconnueNot DefinedOfficial Fix0.000000.02CVE-2023-32803
11/08/20235.55.3Amazon Linux AMI OpenSSH Client Privilege EscalationInconnueNot DefinedOfficial Fix0.000430.00CVE-2023-35812
05/07/20235.55.3Amazon AWS IAM MFA Device elévation de privilègesInconnueNot DefinedOfficial Fix0.000000.04
27/06/20236.36.0Amazon AWS Directory Service EnableRoleAccess Action elévation de privilègesInconnueNot DefinedOfficial Fix0.000000.00

64 plus d'entrées ne sont pas affichées

🔒 Login Required

You need to signup and login to see more of the remaining 64 results.

◂ PrécédentAperçuSuivant ▸

Interested in the pricing of exploits?

See the underground prices here!