CVE-2014-2388
- State
- Published
- Severity
- Not scored
- Published
- Aug 18, 2014
- Updated
- Aug 6, 2024
- Reserved
- Mar 13, 2014
Description
The Storage and Access service in BlackBerry OS 10.x before 10.2.1.1925 on Q5, Q10, Z10, and Z30 devices does not enforce the password requirement for SMB filesystem access, which allows context-dependent attackers to read arbitrary files via (1) a session over a Wi-Fi network or (2) a session over a USB connection in Development Mode.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- http://packetstormsecurity.com/files/127850/BlackBerry-Z10-Authentication-Bypass.html
- http://packetstormsecurity.com/files/127850
- blackberry-z10-cve20142388-sec-bypass(95262)vdb-entry
- 60156third-party-advisory
- http://www.blackberry.com/btsc/KB36174
- blackberry-cve20141470-sec-bypass(95263)vdb-entry
- 69217vdb-entry
- http://www.modzero.ch/advisories/MZ-13-04-Blackberry_Z10-File-Exchange-Authentication-By-Pass.txt
- 20140812 BlackBerry Z 10 - Storage and Access File-Exchange Authentication By-Pass [MZ-13-04]mailing-list
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.