Vulnerability in Blackberry Protect

CVE-2021-32023

An elevation of privilege vulnerability in the message broker of BlackBerry Protect for Windows version(s) versions 1574 and earlier could allow an attacker to potentially execute code in the context of a BlackBerry Cylance service that has admin rights on the system.

EPSS: 0.003 (21.5th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.8 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.

Affected products

  • Blackberry Protect
  • N/a Blackberry Protect For Windows — versions Version 1574 and earlier

References

Frequently asked questions

What is CVE-2021-32023?
CVE-2021-32023 is a high-severity vulnerability in Blackberry Protect. CVSS score: 7.8/10. Published 2021-11-10.
How severe is CVE-2021-32023?
High severity. CVSS v3 base score is 7.8 out of 10.