An Improper Enforcement of Behavioral Workflow vulnerability in the exchangeDeviceServices function on the amzn.dmgr service allowed an attacker to register services that are only locally accessible.
This issue affects:
Amazon Fire TV Stick 3rd gen versions prior to 6.2.9.5. Insignia TV with FireOS versions prior to 7.6.3.3.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Fire_os | Amazon | * | 6.2.9.5 (excluding) |