Vulnerabilities > CVE-2016-3128 - 7PK - Security Features vulnerability in Blackberry Enterprise Service
Attack vector
NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
LOW Integrity impact
HIGH Availability impact
NONE Summary
A spoofing vulnerability in the Core of BlackBerry Enterprise Server (BES) 12 through 12.5.2 allows remote attackers to enroll an illegitimate device to the BES, gain access to device parameters for the BES, or send false information to the BES by gaining access to specific information about a device that was legitimately enrolled on the BES.
Vulnerable Configurations
Common Weakness Enumeration (CWE)
References
- http://support.blackberry.com/kb/articleDetail?articleNumber=000038913
- http://support.blackberry.com/kb/articleDetail?articleNumber=000038913
- http://www.securityfocus.com/bid/95624
- http://www.securityfocus.com/bid/95624
- http://www.securitytracker.com/id/1037585
- http://www.securitytracker.com/id/1037585