{"id":"CVE-2024-51721","state":"PUBLISHED","title":"Vulnerabilities in SecuSUITE Server Components Impact SecuSUITE","description":"A code injection vulnerability in the SecuSUITE Server Web Administration Portal of SecuSUITE versions 5.0.420 and earlier could allow an attacker to potentially inject script commands or other executable content into the server that would run with root privilege.","publishedAt":"2024-11-12T18:05:32.232Z","updatedAt":"2024-11-12T21:34:23.825Z","severity":{"score":7.3,"label":"High","version":"3.1","vector":"CVSS:3.1/AV:A/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H","source":"blackberry"},"assigner":"blackberry","products":["BlackBerry SecuSUITE"],"affected":[{"vendor":"BlackBerry","product":"SecuSUITE","defaultStatus":"unaffected","versions":[{"version":"5.0.420","status":"affected"}],"modules":["SecuSUITE Server Web Administration Portal"]}],"references":["https://support.blackberry.com/pkb/s/article/140220"],"weaknesses":["CWE-59"],"ingestedAt":"2026-10-29T20:08:04.920Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2024/51xxx/CVE-2024-51721.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2024-51721","state":"PUBLISHED","datePublished":"2024-11-12T18:05:32.232Z","dateUpdated":"2024-11-12T21:34:23.825Z","assignerShortName":"blackberry","assignerOrgId":"dbe78b00-5e7b-4fda-8748-329789ecfc5c","dateReserved":"2024-10-30T17:19:06.485Z"},"containers":{"cna":{"title":"Vulnerabilities in SecuSUITE Server Components Impact SecuSUITE","descriptions":[{"lang":"en","value":"A code injection vulnerability in the SecuSUITE Server Web Administration Portal of SecuSUITE versions 5.0.420 and earlier could allow an attacker to potentially inject script commands or other executable content into the server that would run with root privilege."}],"affected":[{"vendor":"BlackBerry","product":"SecuSUITE","defaultStatus":"unaffected","versions":[{"version":"5.0.420","status":"affected"}],"modules":["SecuSUITE Server Web Administration Portal"]}],"references":[{"url":"https://support.blackberry.com/pkb/s/article/140220"}],"metrics":[{"cvssV3_1":{"attackComplexity":"HIGH","attackVector":"ADJACENT_NETWORK","availabilityImpact":"HIGH","baseScore":7.3,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"HIGH","scope":"CHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:A/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H","version":"3.1"},"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}]}],"problemTypes":[{"descriptions":[{"cweId":"CWE-59","description":"CWE-59 Improper Link Resolution Before File Access ('Link Following')","lang":"en","type":"CWE"}]}],"providerMetadata":{"shortName":"blackberry","orgId":"dbe78b00-5e7b-4fda-8748-329789ecfc5c","dateUpdated":"2024-11-12T18:43:15.094Z"},"datePublic":"2024-11-12T18:03:00.000Z","impacts":[{"capecId":"CAPEC-132","descriptions":[{"lang":"en","value":"CAPEC-132 Symlink Attack"}]}],"source":{"discovery":"UNKNOWN"},"x_generator":{"engine":"Vulnogram 0.2.0"}},"adp":[{"title":"CISA ADP Vulnrichment","affected":[{"vendor":"blackberry","product":"secusuite","defaultStatus":"unknown","versions":[{"version":"5.0.420","status":"affected"}],"cpes":["cpe:2.3:a:blackberry:secusuite:*:*:*:*:*:*:*:*"]}],"metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2024-11-12T21:32:19.174330Z","id":"CVE-2024-51721","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2024-11-12T21:34:23.825Z"}}]}}}