Amazon Уязвимости

Временная шкала

Тип

Продукт

Amazon Kindle Fire HD7
Amazon Fire OS3
Amazon Azure API Management3
Amazon Fire TV Stick 3rd Gen3
Amazon Insignia TV3

Устранение последствий

Official Fix41
Temporary Fix0
Workaround1
Unavailable2
Not Defined30

Эксплуатационная пригодность

High1
Functional0
Proof-of-Concept3
Unproven2
Not Defined68

Вектор доступа

Not Defined0
Physical1
Local15
Adjacent23
Network35

Аутентификация

Not Defined0
High1
Low35
None38

Взаимодействие с пользователем

Not Defined0
Required6
None68

C3BM Index

CVSSv3 Base

≤10
≤21
≤30
≤49
≤55
≤618
≤724
≤810
≤95
≤102

CVSSv3 Temp

≤10
≤21
≤30
≤49
≤56
≤625
≤717
≤810
≤95
≤101

VulDB

≤10
≤21
≤32
≤48
≤510
≤625
≤712
≤813
≤91
≤102

NVD

≤10
≤20
≤30
≤41
≤52
≤62
≤73
≤814
≤95
≤102

CNA

≤10
≤20
≤30
≤40
≤51
≤61
≤71
≤82
≤92
≤100

Поставщик

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Эксплойт 0-дня

<1k20
<2k33
<5k21
<10k0
<25k0
<50k0
<100k0
≥100k0

Эксплойт сегодня

<1k73
<2k1
<5k0
<10k0
<25k0
<50k0
<100k0
≥100k0

Объем рынка эксплойтов

🔴 CTI Деятельность

Affected Products (53): AWS (1), AWS Amplify CLI (1), AWS Apache Log4j Hotpatch Package (1), AWS App Runner (2), AWS CloudFormation Bootstrap Tools (1), AWS CloudFront (1), AWS CodeBuild (1), AWS Cognito (1), AWS Console (1), AWS Control Tower (1), AWS Directory Service (1), AWS ECR (1), AWS Encryption SDK (1), AWS Encryption SDK for Java (1), AWS Firecracker (1), AWS IAM (1), AWS Java SDK (1), AWS JavaScript S3 Explorer (1), AWS Redshift JDBC Driver (1), AWS SDK (1), AWS Service Catalog (1), AWS VPN Client (2), Alexa (1), Audible (1), Azure API Management (3), Echo (1), Echo Dot (3), Echo Show (1), Echo Spot (1), Elastic Load Balancing API Tools (1), Fire OS (3), Fire TV Stick 3rd Gen (3), Flexible Payments Service (1), FreeRTOS (2), Insignia TV (3), Key (1), Kindle (3), Kindle App (1), Kindle Fire HD (7), Kindle Touch (2), Kindle for PC (1), Linux (2), Linux AMI (2), Music Player (1), Ring Doorbell (1), Simple Notification Service (1), Web Services CLI (1), Web Services FreeRTOS (3), WorkSpaces Agent (2), WorkSpaces Client (2), amazon-ssm-agent (1), ion-java (1), merchant SDK (1)

ОпубликованоBaseTempУязвимостиProdЭ�RemEPSSCTICVE
15.04.20246.36.0Amazon AWS Amplify CLI слабая аутентификацияНеизвестноNot DefinedOfficial Fix0.000450.05CVE-2024-28056
25.02.20244.54.3Amazon Fire OS Android Debug Bridge эскалация привилегийНеизвестноNot DefinedOfficial Fix0.000450.00CVE-2024-27350
19.01.20243.93.9Amazon AWS Encryption SDK for Java ECDSA Signature слабая аутентификацияProgramming Language SoftwareNot DefinedOfficial Fix0.000520.04CVE-2024-23680
04.01.20247.57.3amazon-ion ion-java отказ в обслуживанииProgramming Language SoftwareNot DefinedOfficial Fix0.000460.05CVE-2024-21634
09.10.20233.33.2Amazon WorkSpaces Client раскрытие информацииНеизвестноNot DefinedOfficial Fix0.000000.08
04.10.20235.05.0Amazon Simple Notification Service Signature Validation слабая аутентификацияНеизвестноNot DefinedNot Defined0.000000.02
11.08.20236.36.0Amazon Linux AMI CA-Certificate слабая аутентификацияНеизвестноNot DefinedOfficial Fix0.000000.02CVE-2023-32803
11.08.20235.55.3Amazon Linux AMI OpenSSH Client Privilege EscalationНеизвестноNot DefinedOfficial Fix0.000430.00CVE-2023-35812
05.07.20235.55.3Amazon AWS IAM MFA Device эскалация привилегийНеизвестноNot DefinedOfficial Fix0.000000.04
27.06.20236.36.0Amazon AWS Directory Service EnableRoleAccess Action эскалация привилегийНеизвестноNot DefinedOfficial Fix0.000000.00

64 больше записей не показано

Do you want to use VulDB in your project?

Use the official API to access entries easily!