8.2
CVE-2016-3128
- EPSS 0.25%
- Veröffentlicht 13.01.2017 09:59:00
- Zuletzt bearbeitet 20.04.2025 01:37:25
- Quelle secure@blackberry.com
- CVE-Watchlists
- Unerledigt
A spoofing vulnerability in the Core of BlackBerry Enterprise Server (BES) 12 through 12.5.2 allows remote attackers to enroll an illegitimate device to the BES, gain access to device parameters for the BES, or send false information to the BES by gaining access to specific information about a device that was legitimately enrolled on the BES.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Blackberry ≫ Enterprise Service Version12.0.0
Blackberry ≫ Enterprise Service Version12.0.1
Blackberry ≫ Enterprise Service Version12.1.0
Blackberry ≫ Enterprise Service Version12.2.0
Blackberry ≫ Enterprise Service Version12.2.1
Blackberry ≫ Enterprise Service Version12.3.0
Blackberry ≫ Enterprise Service Version12.3.1
Blackberry ≫ Enterprise Service Version12.4.0
Blackberry ≫ Enterprise Service Version12.4.1
Blackberry ≫ Enterprise Service Version12.5.0a
Blackberry ≫ Enterprise Service Version12.5.1
Blackberry ≫ Enterprise Service Version12.5.2
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.25% | 0.457 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 8.2 | 3.9 | 4.2 |
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N
|
| nvd@nist.gov | 6.4 | 10 | 4.9 |
AV:N/AC:L/Au:N/C:P/I:P/A:N
|