Vulnerability Details CVE-2016-3128
A spoofing vulnerability in the Core of BlackBerry Enterprise Server (BES) 12 through 12.5.2 allows remote attackers to enroll an illegitimate device to the BES, gain access to device parameters for the BES, or send false information to the BES by gaining access to specific information about a device that was legitimately enrolled on the BES.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 48.7%
CVSS Severity
CVSS v3 Score 8.2
CVSS v2 Score 6.4
References
- http://support.blackberry.com/kb/articleDetail?articleNumber=000038913
- http://www.securityfocus.com/bid/95624
- http://www.securitytracker.com/id/1037585
- http://support.blackberry.com/kb/articleDetail?articleNumber=000038913
- http://www.securityfocus.com/bid/95624
- http://www.securitytracker.com/id/1037585
Products affected by CVE-2016-3128
-
cpe:2.3:a:blackberry:enterprise_service:12.0.0
-
cpe:2.3:a:blackberry:enterprise_service:12.0.1
-
cpe:2.3:a:blackberry:enterprise_service:12.1.0
-
cpe:2.3:a:blackberry:enterprise_service:12.2.0
-
cpe:2.3:a:blackberry:enterprise_service:12.2.1
-
cpe:2.3:a:blackberry:enterprise_service:12.3.0
-
cpe:2.3:a:blackberry:enterprise_service:12.3.1
-
cpe:2.3:a:blackberry:enterprise_service:12.4.0
-
cpe:2.3:a:blackberry:enterprise_service:12.4.1
-
cpe:2.3:a:blackberry:enterprise_service:12.5.0a
-
cpe:2.3:a:blackberry:enterprise_service:12.5.1
-
cpe:2.3:a:blackberry:enterprise_service:12.5.2