CVE-2013-3694: CSRF
BlackBerry Link before 1.2.1.31 on Windows and before 1.1.1 build 39 on Mac OS X does not require authentication for remote file-access folders, which allows remote attackers to read or create arbitrary files via IPv6 WebDAV requests, as demonstrated by a CSRF attack involving DNS rebinding.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2013-3694?
CVE-2013-3694 is considered a medium severity vulnerability due to its potential for unauthorized file access.
How can I fix CVE-2013-3694?
To fix CVE-2013-3694, ensure you update BlackBerry Link to version 1.2.1.31 or later on Windows and 1.1.1 build 39 or later on Mac OS X.
What does CVE-2013-3694 exploit?
CVE-2013-3694 exploits the lack of authentication for remote file-access folders in vulnerable versions of BlackBerry Link.
Which versions of BlackBerry Link are affected by CVE-2013-3694?
Affected versions of BlackBerry Link include 1.1.1.26 and earlier on Windows and 1.1.1 build 38 and earlier on Mac OS X.
Can CVE-2013-3694 lead to remote code execution?
CVE-2013-3694 does not directly allow remote code execution but enables attackers to read or create arbitrary files.