CVE-2016-3128

Severity: high (CVSS 8.2 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.9% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2017-01-13 · updated 2026-06-17
Weakness: CWE-254

Description

A spoofing vulnerability in the Core of BlackBerry Enterprise Server (BES) 12 through 12.5.2 allows remote attackers to enroll an illegitimate device to the BES, gain access to device parameters for the BES, or send false information to the BES by gaining access to specific information about a device that was legitimately enrolled on the BES.

Affected products

BlackBerry Enterprise Service: 12.0.0, 12.0.1, 12.1.0, 12.2.0, 12.2.1, 12.3.0 (+6)

References

http://support.blackberry.com/kb/articleDetail?articleNumber=000038913
http://www.securityfocus.com/bid/95624
http://www.securitytracker.com/id/1037585
http://support.blackberry.com/kb/articleDetail?articleNumber=000038913
http://www.securityfocus.com/bid/95624
http://www.securitytracker.com/id/1037585

Get alerted when CVE-2016-3128 or the next vulnerability affects your stack