BlackBerry SecuSUITE Multiple CVEs Advisory (LPE/Code Injection)

From this webpage screenshot, the following key information about the vulnerability can be obtained: 1. Vulnerability ID: BSRT-2024-002 2. Affected Components: - SecuSUITE Secure Client Authentication (SCA) Server - SecuSUITE Server Web Administration Portal - SecuSUITE Server (System Configuration) 3. Affected Versions: SecuSUITE version 5.0.420 and earlier 4. Vulnerability Types: - Insufficient Entropy - Code Injection - Local Privilege Escalation 5. CVSS Scores: - CVE-2024-51720: 4.8 - CVE-2024-51721: 7.3 - CVE-2024-51722: 6.4 6. Affected Products: SecuSUITE version 5.0.420 and earlier 7. Unaffected Products: All other BlackBerry products (including SS4SK) 8. Affected Users: Administrators who deploy affected products in an enterprise and Administrators who support affected products 9. Mitigations: - Social engineering attackers need to gain control of a system account and execute code within a specific system account. - Social engineering attackers need to gain control of a system account and execute code within a specific system account. - Social engineering attackers need to gain control of a system account and execute code within a specific system account. 10. Workarounds/Recommendations: No known workarounds or recommendations. 11. Software Updates: A new server version is required to resolve these issues. Please contact your account or support representative for updates. This information helps users understand the vulnerability details, affected components and versions, vulnerability types, CVSS scores, affected and unaffected products, affected users, mitigations, workarounds/recommendations, and software updates.

Goal Reached Thanks to every supporter — we hit 100%!

BlackBerry SecuSUITE Multiple CVEs Advisory (LPE/Code Injection)