Medium severity5.4NVD Advisory· Published May 3, 2023· Updated Jun 17, 2026

CVE-2023-1383

Description

An Improper Enforcement of Behavioral Workflow vulnerability in the exchangeDeviceServices function on the amzn.dmgr service allowed an attacker to register services that are only locally accessible.

This issue affects:

Amazon Fire TV Stick 3rd gen versions prior to 6.2.9.5. Insignia TV with FireOS versions prior to 7.6.3.3.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Amazon/Fire OS
cpe:2.3:o:amazon:fire_os:*:*:*:*:*:*:*:*
Range: <6.2.9.5
Insignia/TV with FireOSllm-create2 versions
<7.6.3.3+ 1 more
- (no CPE)range: <7.6.3.3
- (no CPE)range: 7.6.3.2
Amazon/Fire TV Stick 3rd genllm-fuzzy
Range: <6.2.9.5
AmazonFire TV Stick 3rd gen/Fire TV Stick 3rd genv5
Range: 6.2.9.4

Patches

Vulnerability mechanics

References

www.bitdefender.com/blog/labs/vulnerabilities-identified-amazon-fire-tv-stick-insignia-fire-os-tv-series/nvdThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.351
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000