CVE-2013-3693: High severity blackberry enterprise server vulnerability
The BlackBerry Universal Device Service in BlackBerry Enterprise Service (BES) 10.0 through 10.1.2 does not properly restrict access to the JBoss Remote Method Invocation (RMI) interface, which allows remote attackers to upload and execute arbitrary packages via a request to port 1098.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2013-3693?
CVE-2013-3693 is considered to have a high severity due to its potential for remote code execution.
How can I fix CVE-2013-3693?
To remediate CVE-2013-3693, it is recommended to upgrade BlackBerry Enterprise Service to a version greater than 10.1.2.
What systems are affected by CVE-2013-3693?
CVE-2013-3693 affects BlackBerry Enterprise Service versions 10.0, 10.1.0, and 10.1.2.
What type of vulnerability is CVE-2013-3693?
CVE-2013-3693 is classified as a remote code execution vulnerability originating from improper access restrictions.
Who can exploit CVE-2013-3693?
CVE-2013-3693 can be exploited by remote attackers who can send requests to port 1098.