Vulnerability details
CVE-2024-51721
BlackBerry SecuSUITE
Vulnerabilities in SecuSUITE Server Components Impact SecuSUITE
CVSS 3.1
7.3High
Official description
A code injection vulnerability in the SecuSUITE Server Web Administration Portal of SecuSUITE versions 5.0.420 and earlier could allow an attacker to potentially inject script commands or other executable content into the server that would run with root privilege.
CVSS scores
| Score | Version | Source | Vector |
|---|---|---|---|
| 7.3High | 3.1 | CVEProject cvelistV5 (CNA) (blackberry) | CVSS:3.1/AV:A/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H |
Affected products
| Vendor | Product | Versions | Source |
|---|---|---|---|
| BlackBerry | SecuSUITE | 5.0.420 | CVEProject cvelistV5 (CNA) |
| BlackBerry | SecuSUITE | 5.0.420 | CISA ADP / Vulnrichment |
References and advisories
1
Alerts for this product's next CVEsFollow the product to get new vulnerabilities on Telegram.
Details
- Published
- 2024-11-12
- Last updated
- 2024-11-13
- State
- Published
- Assigner (CNA)
- blackberry
Exploit prediction (EPSS)
0.24%
Probability of exploitation in 30 days
16%
Percentile (among all CVEs)
SSVC assessment (CISA)
- Automatable
- No
- Exploitation
- None
- Technical impact
- Total
Weaknesses (CWE)
- CWE-59Improper Link Resolution Before File Access ('Link Following')