CVE-2019-3984

9.8 criticalEPSS 3.8%

Critical (9.8) in amazon blink xt2 sync module firmware. EPSS 3.8% chance of exploitation in the next 30 days.

Blink XT2 Sync Module firmware prior to 2.13.11 allows remote attackers to execute arbitrary commands on the device due to improperly sanitized input when the device retrieves updates scripts from the internet.

Severity

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 3.8% chance of exploitation in the next 30 days; higher than 89% of CVEs (scores of 2026-10-31)
CWE: CWE-78
Published: 2019-12-31
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

amazon:blink_xt2_sync_module_firmware

References

https://www.tenable.com/security/research/tra-2019-51
https://www.tenable.com/security/research/tra-2019-51

Check your stack JSON