VYPR
← All advisories
Unrated severityNVD Advisory· Published Oct 11, 2013· Updated Apr 29, 2026

CVE-2013-3693

CVE-2013-3693

Description

The BlackBerry Universal Device Service in BlackBerry Enterprise Service (BES) 10.0 through 10.1.2 does not properly restrict access to the JBoss Remote Method Invocation (RMI) interface, which allows remote attackers to upload and execute arbitrary packages via a request to port 1098.

Affected products

3
  • Blackberry/Enterprise Service3 versions
    cpe:2.3:a:blackberry:blackberry_enterprise_service:10.0:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:blackberry:blackberry_enterprise_service:10.0:*:*:*:*:*:*:*
    • cpe:2.3:a:blackberry:blackberry_enterprise_service:10.1.0:*:*:*:*:*:*:*
    • cpe:2.3:a:blackberry:blackberry_enterprise_service:10.1.2:*:*:*:*:*:*:*

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

2

News mentions

0

No linked articles in our index yet.