CVE-2024-51720 — Vulnerabilities in SecuSUITE Server Components Impact SecuSUITE

CVE-2024-51720

Vulnerabilities in SecuSUITE Server Components Impact SecuSUITE PUBLISHED

Description (CNA)

An insufficient entropy vulnerability in the SecuSUITE Secure Client Authentication (SCA) Server of SecuSUITE versions 5.0.420 and earlier could allow an attacker to potentially enroll an attacker-controlled device to the victim’s account and telephone number.

Affected (CNA)

Vendor / product	Versions
BlackBerry / SecuSUITE	affected 5.0.420

CWE

CWE-307, CWE-334

References

https://support.blackberry.com/pkb/s/article/140220

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.