Lucene search
+L

CVE-2014-2388

🗓️ 18 Aug 2014 10:00:00Reported by mitreType 
cve
 cve
🔗 web.nvd.nist.gov👁 64 Views🌐 WEB

The Storage and Access service in BlackBerry OS 10.x before 10.2.1.1925 on Q5, Q10, Z10, and Z30 devices does not enforce the password requirement for SMB filesystem access, which allows context-dependent attackers to read arbitrary files

Related
Detection
Refs
Paths
ReporterTitlePublishedViews
Family
0day.today
BlackBerry Z10 Authentication Bypass Vulnerability
14 Aug 201400:00
zdt
Tenable Nessus
BlackBerry 10.x < 10.2.1.1925 Authentication Bypass
15 Aug 201400:00
nessus
Tenable Nessus
BlackBerry 10.x < 10.2.1.1925 File Sharing over Wi-Fi Authentication Bypass
19 Aug 201400:00
nessus
Cvelist
CVE-2014-2388
18 Aug 201410:00
cvelist
EUVD
EUVD-2014-2424
7 Oct 202500:30
euvd
NVD
CVE-2014-2388
18 Aug 201411:15
nvd
Packet Storm
BlackBerry Z10 Authentication Bypass
13 Aug 201400:00
packetstorm
Prion
Design/Logic Flaw
18 Aug 201411:15
prion
Prion
Design/Logic Flaw
18 Aug 201411:15
prion
securityvulns
BlackBerry Z 10 - Storage and Access File-Exchange Authentication By-Pass [MZ-13-04]
26 Aug 201400:00
securityvulns
Rows per page
NVD
Node
ParameterPositionPathDescriptionCWE
sharespathsmb://10.0.0.149SMB file server on Storage and Access exposed via Wi‑Fi without password, allowing unauthorized read/write access to shares.CWE-264
passwordpathsmb://10.0.0.149SMB file server on Storage and Access exposed via Wi‑Fi without password, allowing unauthorized read/write access to shares.CWE-264
sharespathsmb://169.254.0.1SMB file server access via USB development mode that bypasses password prompt, enabling unauthorized read/write access to shares.CWE-264
passwordpathsmb://169.254.0.1SMB file server access via USB development mode that bypasses password prompt, enabling unauthorized read/write access to shares.CWE-264

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation