CVE-2024-51721
Vulnerabilities in SecuSUITE Server Components Impact SecuSUITE
- State
- Published
- Severity
- 7.3 High
- Published
- Nov 12, 2024
- Updated
- Nov 12, 2024
- Reserved
- Oct 30, 2024
Description
A code injection vulnerability in the SecuSUITE Server Web Administration Portal of SecuSUITE versions 5.0.420 and earlier could allow an attacker to potentially inject script commands or other executable content into the server that would run with root privilege.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 7.3 High | CVSS:3.1/AV:A/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H | blackberry |
Weaknesses
- CWE-59 Improper Link Resolution Before File Access ('Link Following')
Affected Products
| Product | Versions |
|---|---|
SecuSUITEBlackBerry |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.