« Volver al listado

CVE-2024-51722

Estado: AplazadaMedia (6.4)—

A local privilege escalation vulnerability in the SecuSUITE Server (System Configuration) of SecuSUITE versions 5.0.420 and earlier could allow a successful attacker that had gained control of code running under one of the system accounts listed in the configuration file to potentially issue privileged script commands.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

⚠ Inferidas por IA a partir de la descripción — NVD aún no ha analizado esta CVE; no son CPE verificados.

Secusuite — SecusuiteAI

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2024-51722",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2024-51722",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "total"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2024-11-13T15:30:34.416241Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "secure@blackberry.com",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 6.4,
          "attackVector": "LOCAL",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H",
          "integrityImpact": "HIGH",
          "userInteraction": "NONE",
          "attackComplexity": "HIGH",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "HIGH",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 5.9,
        "exploitabilityScore": 0.5
      }
    ]
  },
  "affected": [
    {
      "source": "secure@blackberry.com",
      "affectedData": [
        {
          "vendor": "BlackBerry",
          "modules": [
            "SecuSUITE Server (System Configuration)"
          ],
          "product": "SecuSUITE",
          "versions": [
            {
              "status": "affected",
              "version": "5.0.420"
            }
          ],
          "defaultStatus": "unaffected"
        }
      ]
    },
    {
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
      "affectedData": [
        {
          "cpes": [
            "cpe:2.3:a:blackberry:secusuite:*:*:*:*:*:*:*:*"
          ],
          "vendor": "blackberry",
          "product": "secusuite",
          "versions": [
            {
              "status": "affected",
              "version": "5.0.420"
            }
          ],
          "defaultStatus": "unknown"
        }
      ]
    }
  ],
  "published": "2024-11-12T19:15:18.397",
  "references": [
    {
      "url": "https://support.blackberry.com/pkb/s/article/140220",
      "source": "secure@blackberry.com"
    }
  ],
  "vulnStatus": "Deferred",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "secure@blackberry.com",
      "description": [
        {
          "lang": "en",
          "value": "CWE-250"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "A local privilege escalation vulnerability in the SecuSUITE Server (System Configuration) of SecuSUITE versions 5.0.420 and earlier could allow a successful attacker that had gained control of code running under one of the system accounts listed in the configuration file to potentially issue privileged script commands."
    },
    {
      "lang": "es",
      "value": "Una vulnerabilidad de escalada de privilegios locales en el servidor SecuSUITE (configuración del sistema) de las versiones 5.0.420 y anteriores de SecuSUITE podría permitir que un atacante exitoso que haya obtenido el control del código que se ejecuta bajo una de las cuentas del sistema enumeradas en el archivo de configuración potencialmente emita comandos de script privilegiados."
    }
  ],
  "lastModified": "2026-06-17T08:06:12.607",
  "sourceIdentifier": "secure@blackberry.com"
}