CVE-2019-3989

Summary

Blink XT2 Sync Module firmware prior to 2.13.11 allows remote attackers to execute arbitrary commands on the device due to improperly sanitized input when retrieving internal network configuration data.

Affected Software

VendorProductVersion RangeStatus
n/aAmazon’s Blink XT2 Sync ModuleAll firmware versions prior to version 2.13.11affected

Weaknesses

  • Command Injection

ADP Enrichment

CVE Program Container

Additional References

References