Blackberry z10 vulnerabilities

2 CVEs affecting Blackberry z10, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2014-2388, published 2014-08-18.

More from Blackberry.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2014-2388, published 2014-08-18. Medium severity, CVSS 6.1. EPSS: 1.2% chance of exploitation in the next 30 days. The Storage and Access service in BlackBerry OS 10.x before 10.2.1.1925 on Q5, Q10, Z10, and Z30 devices does not enforce the password requirement for SMB filesystem access, which allows…
• CVE-2013-3692, published 2013-07-13. Medium severity, CVSS 6.2. EPSS: 0.4% chance of exploitation in the next 30 days. BlackBerry 10 OS before 10.0.10.648 on BlackBerry Z10 smartphones uses weak permissions for a BlackBerry Protect object, which allows physically proximate attackers to bypass intended access…