CveMateVulnerability intelligence

Amazon Blink Xt2 Sync Module vulnerabilities

7 vulnerabilities

Known vulnerabilities in Amazon Blink Xt2 Sync Module, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

CVE-2019-3987amazonblink_xt2_sync_module_firmware6y ago11-12-2019 22:39

Blink XT2 Sync Module firmware prior to 2.13.11 allows remote attackers to execute arbitrary commands on the device due to improperly sanitized input when configuring the devices wifi configuration via the key parameter.CVE-2019-3985amazonblink_xt2_sync_module_firmware6y ago11-12-2019 22:39

Blink XT2 Sync Module firmware prior to 2.13.11 allows remote attackers to execute arbitrary commands on the device due to improperly sanitized input when configuring the devices wifi configuration via the ssid parameter.CVE-2019-3986amazonblink_xt2_sync_module_firmware6y ago11-12-2019 22:39

Blink XT2 Sync Module firmware prior to 2.13.11 allows remote attackers to execute arbitrary commands on the device due to improperly sanitized input when configuring the devices wifi configuration via the encryption parameter.CVE-2019-3984amazonblink_xt2_sync_module_firmware+16y ago31-12-2019 17:45

Blink XT2 Sync Module firmware prior to 2.13.11 allows remote attackers to execute arbitrary commands on the device due to improperly sanitized input when the device retrieves updates scripts from the internet.CVE-2019-3989amazonblink_xt2_sync_module_firmware6y ago11-12-2019 22:38

Blink XT2 Sync Module firmware prior to 2.13.11 allows remote attackers to execute arbitrary commands on the device due to improperly sanitized input when retrieving internal network configuration data.CVE-2019-3983amazonblink_xt2_sync_module_firmware6y ago11-12-2019 22:39

Blink XT2 Sync Module firmware prior to 2.13.11 allows remote attackers to execute arbitrary code and commands on the device due to insufficient UART protections.CVE-2019-3988amazonblink_xt2_sync_module_firmware6y ago11-12-2019 22:39

Blink XT2 Sync Module firmware prior to 2.13.11 allows remote attackers to execute arbitrary commands on the device due to improperly sanitized input when configuring the devices wifi configuration via the bssid parameter.