CVE-2013-3693
Last modified
CVE-2013-3693 is a vulnerability of currently unknown severity. The BlackBerry Universal Device Service in BlackBerry Enterprise Service (BES) 10.0 through 10.1.2 does not properly restrict access to the JBoss Remote Method Invocation (RMI) interface, which allows remote attackers to upload and execute arbitrary packages via a request to port 1098.. EPSS estimates a 0.96% chance of exploitation in the next 30 days.
Description
The BlackBerry Universal Device Service in BlackBerry Enterprise Service (BES) 10.0 through 10.1.2 does not properly restrict access to the JBoss Remote Method Invocation (RMI) interface, which allows remote attackers to upload and execute arbitrary packages via a request to port 1098.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Blackberry | Blackberry Enterprise Service | 10.0 |
| Blackberry | Blackberry Enterprise Service | 10.1.0 |
| Blackberry | Blackberry Enterprise Service | 10.1.2 |
References
- http://secunia.com/advisories/55187Vendor Advisory
- http://secunia.com/advisories/55187Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2013-3693?
How severe is CVE-2013-3693?
How do I fix CVE-2013-3693?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2013
- CVE-2013-3687AirLive POE2600HD, POE250HD, POE200HD, OD-325HD, OD-2025HD, …
- CVE-2013-3688The TP-Link IP Cameras TL-SC3171, TL-SC3130, TL-SC3130G, TL-…
- CVE-2013-3689Brickcom FB-100Ap, WCB-100Ap, MD-100Ap, WFB-100Ap, OB-100Ae,…
- CVE-2013-3690Cross-site request forgery (CSRF) vulnerability in cgi-bin/u…
- CVE-2013-3691AirLive POE-2600HD allows remote attackers to cause a denial…7.5
- CVE-2013-3692BlackBerry 10 OS before 10.0.10.648 on BlackBerry Z10 smartp…
- CVE-2013-3694BlackBerry Link before 1.2.1.31 on Windows and before 1.1.1 …
- CVE-2013-3697Integer overflow in the NWFS.SYS kernel driver 4.91.5.8 in N…
- CVE-2013-3698Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
- CVE-2013-3699Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
- CVE-2013-3701Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
- CVE-2013-3702Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
Are you affected by CVE-2013-3693?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST