CVE-2016-3128: blackberry enterprise_service 7PK - Security Features

Vulnerability summary

CVE-2016-3128 is a high (CVSS 8.2) 7PK - Security Features vulnerability in blackberry enterprise_service. EPSS estimates a 1.87% chance of exploitation in the next 30 days, higher than 79% of scored vulnerabilities.

Timeline

1. 13-01-2017
   PublishedVulnerability first disclosed.
2. 05-08-2024
   Last modifiedVulnerability information updated.

Description

A spoofing vulnerability in the Core of BlackBerry Enterprise Server (BES) 12 through 12.5.2 allows remote attackers to enroll an illegitimate device to the BES, gain access to device parameters for the BES, or send false information to the BES by gaining access to specific information about a device that was legitimately enrolled on the BES.

• CWE-2547PK - Security FeaturesSoftware security is not security software. Here we're concerned with topics like authentication, access control, confidentiality, cryptography, and privilege management.