CVE-2016-3128

Published: Jan 13, 2017Modified: May 13, 2026

8.2

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N

Exploitability: 3.9 / Impact: 4.2

Source: NVD

Description

A spoofing vulnerability in the Core of BlackBerry Enterprise Server (BES) 12 through 12.5.2 allows remote attackers to enroll an illegitimate device to the BES, gain access to device parameters for the BES, or send false information to the BES by gaining access to specific information about a device that was legitimately enrolled on the BES.

Affected (12)

Products: Blackberry: Enterprise Service

Blackberry

1 product

Enterprise Service

Configuration A

12 vulnerable

Vulnerable Software	Affected Versions
Blackberry Enterprise Service	Version 12.0.0
Blackberry Enterprise Service	Version 12.0.1
Blackberry Enterprise Service	Version 12.1.0
Blackberry Enterprise Service	Version 12.2.0
Blackberry Enterprise Service	Version 12.2.1
Blackberry Enterprise Service	Version 12.3.0
Blackberry Enterprise Service	Version 12.3.1
Blackberry Enterprise Service	Version 12.4.0
Blackberry Enterprise Service	Version 12.4.1
Blackberry Enterprise Service	Version 12.5.0a
Blackberry Enterprise Service	Version 12.5.1
Blackberry Enterprise Service	Version 12.5.2