PT-2017-8346
CVE-2016-3128
·
Published
2017-01-13
·
Updated
2017-01-20
Description by
CVSS 3.1
8.2
HighMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N
Name of the Vulnerable Software and Affected Versions
BlackBerry Enterprise Server versions 12 through 12.5.2
Description
A spoofing issue in the Core of BlackBerry Enterprise Server allows remote attackers to enroll an illegitimate device, gain access to device parameters, or send false information by accessing specific details about a legitimately enrolled device.
Recommendations
For versions 12 through 12.5.2, update to a version that contains a fix for this issue to prevent remote attackers from exploiting the spoofing vulnerability.
Found an issue in the description? Have something to add? Feel free to write us 👾