cve/2023/CVE-2023-1383.md

### [CVE-2023-1383](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1383)
![](https://img.shields.io/static/v1?label=Product&message=Fire%20TV%20Stick%203rd%20gen&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=TV%20with%20FireOS%20&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=%3D%206.2.9.4%20&color=brighgreen)
![](https://img.shields.io/static/v1?label=Version&message=%3D%207.6.3.2%20&color=brighgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-841%3A%20Improper%20Enforcement%20of%20Behavioral%20Workflow&color=brighgreen)

### Description

An Improper Enforcement of Behavioral Workflow vulnerability in the exchangeDeviceServices function on the amzn.dmgr service allowed an attacker to register services that are only locally accessible.This issue affects:Amazon Fire TV Stick 3rd gen versions prior to 6.2.9.5. Insignia TV with FireOS versions prior to 7.6.3.3.

### POC

#### Reference
- https://www.bitdefender.com/blog/labs/vulnerabilities-identified-amazon-fire-tv-stick-insignia-fire-os-tv-series/

#### Github
No PoCs found on GitHub currently.