Amazon Luki w zabezpieczeniach

Oś czasu

Rodzaj

Not Defined42
Tablet Operating System14
Programming Language Software4
Artificial Intelligence Software4
Automation Software4

Produkt

Amazon Kindle Fire HD7
Amazon Fire OS3
Amazon Azure API Management3
Amazon Fire TV Stick 3rd Gen3
Amazon Insignia TV3

Przeciwdziałanie

Official Fix41
Temporary Fix0
Workaround1
Unavailable2
Not Defined30

Wykorzystywanie

High1
Functional0
Proof-of-Concept3
Unproven2
Not Defined68

Wektor dostępu

Not Defined0
Physical1
Local15
Adjacent23
Network35

Uwierzytelnianie

Not Defined0
High1
Low35
None38

Interakcja z użytkownikiem

Not Defined0
Required6
None68

C3BM Index

CVSSv3 Base

≤10
≤21
≤30
≤49
≤55
≤618
≤724
≤810
≤95
≤102

CVSSv3 Temp

≤10
≤21
≤30
≤49
≤56
≤625
≤717
≤810
≤95
≤101

VulDB

≤10
≤21
≤32
≤48
≤510
≤625
≤712
≤813
≤91
≤102

NVD

≤10
≤20
≤30
≤41
≤52
≤62
≤73
≤814
≤95
≤102

CNA

≤10
≤20
≤30
≤40
≤51
≤61
≤71
≤82
≤92
≤100

Sprzedawca

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Exploit 0-day

<1k20
<2k33
<5k21
<10k0
<25k0
<50k0
<100k0
≥100k0

Wykorzystaj dzisiaj

<1k72
<2k2
<5k0
<10k0
<25k0
<50k0
<100k0
≥100k0

Wykorzystaj wielkość rynku

🔴 CTI Zajęcia

Affected Products (53): AWS (1), AWS Amplify CLI (1), AWS Apache Log4j Hotpatch Package (1), AWS App Runner (2), AWS CloudFormation Bootstrap Tools (1), AWS CloudFront (1), AWS CodeBuild (1), AWS Cognito (1), AWS Console (1), AWS Control Tower (1), AWS Directory Service (1), AWS ECR (1), AWS Encryption SDK (1), AWS Encryption SDK for Java (1), AWS Firecracker (1), AWS IAM (1), AWS Java SDK (1), AWS JavaScript S3 Explorer (1), AWS Redshift JDBC Driver (1), AWS SDK (1), AWS Service Catalog (1), AWS VPN Client (2), Alexa (1), Audible (1), Azure API Management (3), Echo (1), Echo Dot (3), Echo Show (1), Echo Spot (1), Elastic Load Balancing API Tools (1), Fire OS (3), Fire TV Stick 3rd Gen (3), Flexible Payments Service (1), FreeRTOS (2), Insignia TV (3), Key (1), Kindle (3), Kindle App (1), Kindle Fire HD (7), Kindle Touch (2), Kindle for PC (1), Linux (2), Linux AMI (2), Music Player (1), Ring Doorbell (1), Simple Notification Service (1), Web Services CLI (1), Web Services FreeRTOS (3), WorkSpaces Agent (2), WorkSpaces Client (2), amazon-ssm-agent (1), ion-java (1), merchant SDK (1)

OpublikowanoBaseTempSłaby punktProdWykPrzEPSSCTICVE
2024-04-156.36.0Amazon AWS Amplify CLI weak authenticationNieznanyNot DefinedOfficial Fix0.000450.09CVE-2024-28056
2024-02-254.54.3Amazon Fire OS Android Debug Bridge privilege escalationNieznanyNot DefinedOfficial Fix0.000450.05CVE-2024-27350
2024-01-193.93.9Amazon AWS Encryption SDK for Java ECDSA Signature weak authenticationProgramming Language SoftwareNot DefinedOfficial Fix0.000520.04CVE-2024-23680
2024-01-047.57.3amazon-ion ion-java denial of serviceProgramming Language SoftwareNot DefinedOfficial Fix0.000460.17CVE-2024-21634
2023-10-093.33.2Amazon WorkSpaces Client information disclosureNieznanyNot DefinedOfficial Fix0.000000.08
2023-10-045.05.0Amazon Simple Notification Service Signature Validation weak authenticationNieznanyNot DefinedNot Defined0.000000.02
2023-08-116.36.0Amazon Linux AMI CA-Certificate weak authenticationNieznanyNot DefinedOfficial Fix0.000000.02CVE-2023-32803
2023-08-115.55.3Amazon Linux AMI OpenSSH Client Privilege EscalationNieznanyNot DefinedOfficial Fix0.000430.00CVE-2023-35812
2023-07-055.55.3Amazon AWS IAM MFA Device privilege escalationNieznanyNot DefinedOfficial Fix0.000000.04
2023-06-276.36.0Amazon AWS Directory Service EnableRoleAccess Action privilege escalationNieznanyNot DefinedOfficial Fix0.000000.00

64 więcej wpisów nie jest pokazywanych

🔒 Login Required

You need to signup and login to see more of the remaining 64 results.

◂ PoprzedniPrzeglądKolejny ▸

Do you know our Splunk app?

Download it now for free!