CVE-2013-3693

EPSS 0.27%
Veröffentlicht 11.10.2013 22:55:36
Zuletzt bearbeitet 11.04.2025 00:51:21
Quelle cve@mitre.org
CVE-Watchlists
Login
Unerledigt
Login

The BlackBerry Universal Device Service in BlackBerry Enterprise Service (BES) 10.0 through 10.1.2 does not properly restrict access to the JBoss Remote Method Invocation (RMI) interface, which allows remote attackers to upload and execute arbitrary packages via a request to port 1098.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 5

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Blackberry ≫ Blackberry Enterprise Service Version10.0

Blackberry ≫ Blackberry Enterprise Service Version10.1.0

Blackberry ≫ Blackberry Enterprise Service Version10.1.2

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.27%	0.472

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	7.9	5.5	10	AV:A/AC:M/Au:N/C:C/I:C/A:C

http://btsc.webapps.blackberry.com/btsc/viewdocument.do%3Bjsessionid=1C7CE6911426BCFAF2A80C3834F4DF0F?externalId=KB35139&sliceId=1&cmd=displayKC&docType=kc&noCount=true&ViewedDocsListHelper=com.kanisa.apps.common.BaseViewedDocsListHelperImpl

http://secunia.com/advisories/55187

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2013-3693

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2013-3693

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2013-3693

EUVD