NVD

Id
30814  
Name
CVE-2014-2388  
Description
The Storage and Access service in BlackBerry OS 10.x before 10.2.1.1925 on Q5, Q10, Z10, and Z30 devices does not enforce the password requirement for SMB filesystem access, which allows context-dependent attackers to read arbitrary files via (1) a session over a Wi-Fi network or (2) a session over a USB connection in Development Mode.  
Reject
 
CVSS Version
2  
CVSS Score
6.1  
Severity
Medium  
CVSS Base Score
6.1  
CVSS Impact Subscore
6.9  
CVSS Exploit Subscore
6.5  
CVSS Vector
(AV:A/AC:L/Au:N/C:C/I:N/A:N)  
Pub Date
2017-01-19  
Published
2014-08-18  
Modified Date
2017-01-06  
Seq
2014-2388  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
162226 30814 CVE-2014-2388 http://packetstormsecurity.com/files/127850  View
162227 30814 CVE-2014-2388 http://packetstormsecurity.com/files/127850/BlackBerry-Z10-Authentication-Bypass.html  View
162228 30814 CVE-2014-2388 60156  View
162229 30814 CVE-2014-2388 http://www.blackberry.com/btsc/KB36174  View
162230 30814 CVE-2014-2388 http://www.modzero.ch/advisories/MZ-13-04-Blackberry_Z10-File-Exchange-Authentication-By-Pass.txt  View
162231 30814 CVE-2014-2388 20140812 BlackBerry Z 10 - Storage and Access File-Exchange Authentication By-Pass [MZ-13-04]  View
162232 30814 CVE-2014-2388 69217  View
162233 30814 CVE-2014-2388 blackberry-z10-cve20142388-sec-bypass(95262)  View
162234 30814 CVE-2014-2388 blackberry-cve20141470-sec-bypass(95263)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
14969 JVNDB-2014-003844 Blackberry の Storage および Access サービスにおける任意のファイルを読まれる脆弱性 Blackberry の Storage および Access サービスは、SMB ファイルシステムのアクセスに対してパスワードの要求を強制しないため、任意のファイルを読まれる脆弱性が存在します。 CVE-2014-2388 69675 CVE-2014-2388 30814 6.1 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-003844.html 2014-08-12 2014-08-19 View