Vulnerability Details : CVE-2021-32023
An elevation of privilege vulnerability in the message broker of BlackBerry Protect for Windows version(s) versions 1574 and earlier could allow an attacker to potentially execute code in the context of a BlackBerry Cylance service that has admin rights on the system.
Vulnerability category: Execute codeGain privilege
Products affected by CVE-2021-32023
- cpe:2.3:a:blackberry:protect:*:*:*:*:*:windows:*:*
Exploit prediction scoring system (EPSS) score for CVE-2021-32023
0.05%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 12 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2021-32023
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
|---|---|---|---|---|---|---|
|
7.2
|
HIGH | AV:L/AC:L/Au:N/C:C/I:C/A:C |
3.9
|
10.0
|
NIST | |
|
7.8
|
HIGH | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
1.8
|
5.9
|
NIST |
References for CVE-2021-32023
-
https://support.blackberry.com/kb/articleDetail?articleNumber=000088685
BSRT-2021-003 Vulnerabilities Impact BlackBerry Protect for WindowsVendor Advisory
Jump to