Medium severity · published Nov 12, 2024
CVE-2024-51720
Vulnerabilities in SecuSUITE Server Components Impact SecuSUITE
4.8
CVSS
0.3%
EPSS
No
On KEV
Description
An insufficient entropy vulnerability in the SecuSUITE Secure Client Authentication (SCA) Server of SecuSUITE versions 5.0.420 and earlier could allow an attacker to potentially enroll an attacker-controlled device to the victim’s account and telephone number.
CVSS vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N
Attack vector
Network
Complexity
High
Privileges
None
User interaction
None
Confidentiality
Low
Integrity
Low
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 25% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SE
SecuSUITE · BlackBerry
5.0.420 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2024-51720
CVE.org
https://www.cve.org/CVERecord?id=CVE-2024-51720
support.blackberry.com
https://support.blackberry.com/pkb/s/article/140220
More from SecuSUITE
7.3
CVE-2024-51721
Vulnerabilities in SecuSUITE Server Components Impact SecuSUITE
6.4
CVE-2024-51722
Vulnerabilities in SecuSUITE Server Components Impact SecuSUITE