7.1
CVE-2023-32701
- EPSS 0.09%
- Published 14.11.2023 19:15:27
- Last modified 09.09.2025 15:15:30
- Source secure@blackberry.com
- Teams watchlist Login
- Open Login
Improper Input Validation in the Networking Stack of QNX SDP version(s) 6.6, 7.0, and 7.1 could allow an attacker to potentially cause Information Disclosure or a Denial-of-Service condition.
Data is provided by the National Vulnerability Database (NVD)
Blackberry ≫ Qnx Software Development Platform Version6.6.0
Blackberry ≫ Qnx Software Development Platform Version7.0
Blackberry ≫ Qnx Software Development Platform Version7.1
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
| Type | Source | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.09% | 0.275 |
| Source | Base Score | Exploit Score | Impact Score | Vector string |
|---|---|---|---|---|
| nvd@nist.gov | 7.1 | 1.8 | 5.2 |
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
|
| secure@blackberry.com | 7.1 | 1.8 | 5.2 |
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
|
CWE-1288 Improper Validation of Consistency within Input
The product receives a complex input with multiple elements or fields that must be consistent with each other, but it does not validate or incorrectly validates that the input is actually consistent.