QwikSec

Security Database

CVE

CWE

Training

CVE-2014-2388

Published: Aug 18, 2014

Modified: Aug 6, 2024

PUBLISHED

Description

The Storage and Access service in BlackBerry OS 10.x before 10.2.1.1925 on Q5, Q10, Z10, and Z30 devices does not enforce the password requirement for SMB filesystem access, which allows context-dependent attackers to read arbitrary files via (1) a session over a Wi-Fi network or (2) a session over a USB connection in Development Mode.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

http://packetstormsecurity.com/files/127850/BlackBerry-Z10-Authentication-Bypass.html

x_refsource_MISC

http://packetstormsecurity.com/files/127850

x_refsource_MISC

blackberry-z10-cve20142388-sec-bypass(95262)

vdb-entry

x_refsource_XF

third-party-advisory

x_refsource_SECUNIA

http://www.blackberry.com/btsc/KB36174

x_refsource_CONFIRM

blackberry-cve20141470-sec-bypass(95263)

vdb-entry

x_refsource_XF

vdb-entry

x_refsource_BID

http://www.modzero.ch/advisories/MZ-13-04-Blackberry_Z10-File-Exchange-Authentication-By-Pass.txt

x_refsource_MISC

20140812 BlackBerry Z 10 - Storage and Access File-Exchange Authentication By-Pass [MZ-13-04]

mailing-list

x_refsource_BUGTRAQ

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.