Skip to content
OpenAdvisories
Unscored CVE-2016-3128 EUVD-2016-4180GHSA-94c7-grvp-xm27

A spoofing vulnerability in the Core of BlackBerry Enterprise Server (BES) 12 through 12.5.2 allows remote attackers to enroll an illegitim…

Published Jan 13, 2017 · Updated Aug 5, 2024 · Assigned by blackberry

Description

A spoofing vulnerability in the Core of BlackBerry Enterprise Server (BES) 12 through 12.5.2 allows remote attackers to enroll an illegitimate device to the BES, gain access to device parameters for the BES, or send false information to the BES by gaining access to specific information about a device that was legitimately enrolled on the BES.

Affected products

VendorProductAffectedFixed
— BES12 versions through 12.5.2 BES12 versions through 12.5.2 —

References