PT-2019-18581 · Amazon · Amazon Fire Os

Yakov Shafranovich · Publicado 2019-02-17 · Atualizado 2020-08-24 · CVE-2019-7399

Positive Technologies (AI Summary)

CVSS v3.1

7.4

Alta

Vetor base

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions Amazon Fire OS versions prior to 5.3.6.4

Description The issue allows a man-in-the-middle attack against HTTP requests for "Terms of Use" and Privacy pages.

Recommendations For Amazon Fire OS versions prior to 5.3.6.4, update to version 5.3.6.4 or later to resolve the issue.

Exploit

Correção

Origin Validation Error

Enumeração de Fraquezas

CWE-346

Identificadores relacionados

CVE-2019-7399

Produtos afetados

Amazon Fire Os

Referências · 4

• 🔥 https://wwws.nightwatchcybersecurity.com/2019/02/07/content-injection-in-amazon-kindles-fireos-cve-2019-7399 · Exploit
• http://securityfocus.com/bid/107025 · Nota
• https://osv.dev/vulnerability/CVE-2019-7399 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2019-7399 · Nota de Segurança