Blackberry Secusuite vulnerabilities

3 CVEs affecting Blackberry Secusuite, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-51722, published 2024-11-12.

More from Blackberry.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2024-51720, published 2024-11-12. Medium severity, CVSS 4.8. EPSS: 0.3% chance of exploitation in the next 30 days. An insufficient entropy vulnerability in the SecuSUITE Secure Client Authentication (SCA) Server of SecuSUITE versions 5.0.420 and earlier could allow an attacker to potentially enroll an…
• CVE-2024-51721, published 2024-11-12. High severity, CVSS 7.3. EPSS: 0.2% chance of exploitation in the next 30 days. A code injection vulnerability in the SecuSUITE Server Web Administration Portal of SecuSUITE versions 5.0.420 and earlier could allow an attacker to potentially inject script commands or other…
• CVE-2024-51722, published 2024-11-12. Medium severity, CVSS 6.4. EPSS: 0.1% chance of exploitation in the next 30 days. A local privilege escalation vulnerability in the SecuSUITE Server (System Configuration) of SecuSUITE versions 5.0.420 and earlier could allow a successful attacker that had gained control of code…