| CVSS Meta Temp Score | Current Exploit Price (≈) | CTI Interest Score |
|---|---|---|
| 6.6 | $0-$5k | 0.00 |
Summary
A vulnerability identified as critical has been detected in RIM BlackBerry -/10.1.0.2354. Affected is an unknown function of the component Samba Service. This manipulation causes access control. This vulnerability appears as CVE-2014-2388. In addition, an exploit is available. You should upgrade the affected component.
Details
A vulnerability was found in RIM BlackBerry -/10.1.0.2354. It has been declared as critical. Affected by this vulnerability is some unknown functionality of the component Samba Service. The manipulation with an unknown input leads to a access control vulnerability. The CWE definition for the vulnerability is CWE-264. As an impact it is known to affect confidentiality, integrity, and availability.
The weakness was presented 08/12/2014 by David Gullasch, Max Moser and Martin Schobert with modzero AG as Storage and Access File-Exchange Authentication By-Pass as confirmed advisory (Website). It is possible to read the advisory at modzero.ch. The public release was coordinated in cooperation with RIM. This vulnerability is known as CVE-2014-2388 since 03/13/2014. The attack can be launched remotely. The exploitation doesn't need any form of authentication. Technical details are unknown but a public exploit is available. The attack technique deployed by this issue is T1068 according to MITRE ATT&CK. The advisory points out:
The problem occurs, when "Sharing via Wi-Fi" has been enabled on the Z10. The "Storage and Access" dialog of the Z10 asks the user for a password that shall be used to access data on the fileserver. Under certain circumstances, the fileserver fails to ask for a password and allows access even without specifying credentials. This behaviour does not always occur but is reproducible within at most one of ten different tries via Wi-Fi.
A public exploit has been developed by David Gullasch/Max Moser/Martin Schobert and been published immediately after the advisory. It is possible to download the exploit at modzero.ch. It is declared as proof-of-concept. The vulnerability was handled as a non-public zero-day exploit for at least 283 days. During that time the estimated underground price was around $0-$5k.
Upgrading eliminates this vulnerability. A possible mitigation has been published before and not just after the disclosure of the vulnerability. The advisory contains the following remark:
To reduce the risks in public wireless networks, disable "Access using Wi-Fi" in the "Settings / Storage and Access" dialog.
The vulnerability is also documented in the databases at X-Force (95262), SecurityFocus (BID 69217†), Secunia (SA60156†) and Vulnerability Center (SBV-45914†). Additional details are provided at modzero.ch. See VDB-67364 for similar entry. Several companies clearly confirm that VulDB is the primary source for best vulnerability data.
Product
Vendor
Name
Version
License
Website
- Vendor: http://www.rim.com/
CPE 2.3
CPE 2.2
Video
Link: modzero.chCVSSv4
VulDB Vector: 🔍VulDB Reliability: 🔍
CVSSv3
VulDB Meta Base Score: 7.3VulDB Meta Temp Score: 6.6
VulDB Base Score: 7.3
VulDB Temp Score: 6.6
VulDB Vector: 🔍
VulDB Reliability: 🔍
CVSSv2
| AV | AC | Au | C | I | A |
|---|---|---|---|---|---|
| 💳 | 💳 | 💳 | 💳 | 💳 | 💳 |
| 💳 | 💳 | 💳 | 💳 | 💳 | 💳 |
| 💳 | 💳 | 💳 | 💳 | 💳 | 💳 |
| Vector | Complexity | Authentication | Confidentiality | Integrity | Availability |
|---|---|---|---|---|---|
| Unlock | Unlock | Unlock | Unlock | Unlock | Unlock |
| Unlock | Unlock | Unlock | Unlock | Unlock | Unlock |
| Unlock | Unlock | Unlock | Unlock | Unlock | Unlock |
VulDB Base Score: 🔍
VulDB Temp Score: 🔍
VulDB Reliability: 🔍
NVD Base Score: 🔍
Exploiting
Class: Access controlCWE: CWE-264
CAPEC: 🔍
ATT&CK: 🔍
Physical: No
Local: No
Remote: Yes
Availability: 🔍
Access: Public
Status: Proof-of-Concept
Author: David Gullasch/Max Moser/Martin Schobert
Download: 🔍
EPSS Score: 🔍
EPSS Percentile: 🔍
Price Prediction: 🔍
Current Price Estimation: 🔍
| 0-Day | Unlock | Unlock | Unlock | Unlock |
|---|---|---|---|---|
| Today | Unlock | Unlock | Unlock | Unlock |
Threat Intelligence
Interest: 🔍Active Actors: 🔍
Active APT Groups: 🔍
Countermeasures
Recommended: UpgradeStatus: 🔍
Reaction Time: 🔍
0-Day Time: 🔍
Exploit Delay Time: 🔍
Timeline
06/23/2013 🔍06/24/2013 🔍
03/13/2014 🔍
04/02/2014 🔍
08/12/2014 🔍
08/12/2014 🔍
08/12/2014 🔍
08/12/2014 🔍
08/13/2014 🔍
08/13/2014 🔍
08/18/2014 🔍
08/24/2014 🔍
02/10/2022 🔍
Sources
Vendor: rim.comAdvisory: Storage and Access File-Exchange Authentication By-Pass
Researcher: David Gullasch, Max Moser, Martin Schobert
Organization: modzero AG
Status: Confirmed
Confirmation: 🔍
Coordinated: 🔍
CVE: CVE-2014-2388 (🔍)
GCVE (CVE): GCVE-0-2014-2388
GCVE (VulDB): GCVE-100-67363
IAVM: 🔍
X-Force: 95262 - BlackBerry Z10 security bypass, Medium Risk
SecurityFocus: 69217 - BlackBerry Z10 CVE-2014-2388 Authentication Bypass Vulnerability
Secunia: 60156 - BlackBerry OS File Sharing Authentication Bypass Vulnerability, Less Critical
Vulnerability Center: 45914 - BlackBerry OS <10.2.1.1925 File System Read via Wi-Fi Network or USB Connection in Dev Mode, Medium
Misc.: 🔍
See also: 🔍
Entry
Created: 08/13/2014 13:10Updated: 02/10/2022 18:35
Changes: 08/13/2014 13:10 (84), 06/05/2017 10:00 (5), 02/10/2022 18:35 (3)
Complete: 🔍
Cache ID: 216:D77:103
No comments yet. Languages: en.
Please log in to comment.