Vulnerability Report

CVE-2021-32021

RCE

Title: Denial of service in BlackBerry Protect for Windows

DoS, RCE

Proof Of Concept

No public PoC currently indexed for CVE-2021-32021.

CWE Category NVD-CWE-noinfo

Published Date Nov 10, 2021

Modified Date Nov 21, 2024

Exploit Status Not Found

Score 7.8 CVSS v3.1

Exploit Probability (EPSS)

0.05%

Vulnerability Summary

CVE-2021-32021: A denial of service vulnerability in the message broker of BlackBerry Protect for Windows version(s) versions 1574 and earlier could allow an attacker to potentially execute code in the context of a BlackBerry Cylance service that has admin rights on the system.

Impacted Vendors

risingstack 1

blackberry 1

Reference Links

https://support.blackberry.com/kb/articleDetail?articleNumber=000088685 https://support.blackberry.com/kb/articleDetail?articleNumber=000088685

CVSS v3.1

Source Entity [email protected]

Severity HIGH

7.8

Attack Vector

LOCAL

Complexity

LOW

Privileges

N/A

Interaction

NONE

Confidentiality

N/A

Integrity

N/A

Availability

N/A

Scope

UNCHANGED

RAW VECTOR CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CVSS v2.0

Source Entity [email protected]

Severity HIGH

7.2

Access Vector

N/A

Authentication

N/A

RAW VECTOR AV:L/AC:L/Au:N/C:C/I:C/A:C

Associated Attack Patterns (CAPEC)

Total: Patterns

CVE-2021-32021 Exploits & PoCs (Proof Of Concept)

No public PoCs found in our database for this CVE.

November 21, 2024 MODIFIED

Vulnerability data or affected products updated.

November 10, 2021 PUBLISHED

Vulnerability first announced in NVD.

Attack Vector Matrix

Access Vector LOCAL

Complexity LOW

Privileges N/A

Interaction NONE

CVSS Vector String


                                    CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected Stack

No specific products linked.