CVE-2013-3693

EPSS 0.27%
Published 11.10.2013 22:55:36
Last modified 11.04.2025 00:51:21
Source cve@mitre.org
Teams watchlist Login
Open Login

The BlackBerry Universal Device Service in BlackBerry Enterprise Service (BES) 10.0 through 10.1.2 does not properly restrict access to the JBoss Remote Method Invocation (RMI) interface, which allows remote attackers to upload and execute arbitrary packages via a request to port 1098.

Affected products Warnungen 0 Metrics 2 CWE 0 References 5

Data is provided by the National Vulnerability Database (NVD)

Blackberry ≫ Blackberry Enterprise Service Version10.0

Blackberry ≫ Blackberry Enterprise Service Version10.1.0

Blackberry ≫ Blackberry Enterprise Service Version10.1.2

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.27%	0.472

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	7.9	5.5	10	AV:A/AC:M/Au:N/C:C/I:C/A:C

http://btsc.webapps.blackberry.com/btsc/viewdocument.do%3Bjsessionid=1C7CE6911426BCFAF2A80C3834F4DF0F?externalId=KB35139&sliceId=1&cmd=displayKC&docType=kc&noCount=true&ViewedDocsListHelper=com.kanisa.apps.common.BaseViewedDocsListHelperImpl

http://secunia.com/advisories/55187

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2013-3693

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2013-3693

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2013-3693

EUVD