What’s Vulnerable › Vulnerabilities

CVE-2013-3692

• Severity: medium (CVSS 6.2 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2013-07-13 · updated 2026-06-16
• Weakness: CWE-264

Description

BlackBerry 10 OS before 10.0.10.648 on BlackBerry Z10 smartphones uses weak permissions for a BlackBerry Protect object, which allows physically proximate attackers to bypass intended access restrictions by leveraging a user's BlackBerry Protect password-reset request and a user's installation of a crafted application.

Affected products

• Blackberry Os: through 10.0.10.261; 10.0, 10.0.10, 10.0.10.85
• BlackBerry Z10: all versions

References

• http://www.blackberry.com/btsc/KB34458
• https://exchange.xforce.ibmcloud.com/vulnerabilities/85878
• http://www.blackberry.com/btsc/KB34458
• https://exchange.xforce.ibmcloud.com/vulnerabilities/85878

Get alerted when CVE-2013-3692 or the next vulnerability affects your stack