CVE-2024-51721— Vulnerabilities in SecuSUITE Server Components Impact SecuSUITE
Quick assessment
Affected
BlackBerry SecuSUITE
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
BlackBerry SecuSUITE是加拿大黑莓（BlackBerry）公司的一种多平台解决方案，用于对语音通话和消息进行端到端加密。 BlackBerry SecuSUITE 5.0.420及之前版本存在安全漏洞，该漏洞源于存在代码注入漏洞，可能允许攻击者将脚本命令或其他可执行内容注入以root权限运行的服务器。
Possible ATT&CK Techniques 2 AI
T1059 · Command and Scripting Interpreter T1190 · Exploit Public-Facing Application
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2024-51721
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Vulnerabilities in SecuSUITE Server Components Impact SecuSUITE
Source: CVE Program / CVE List V5
Vulnerability Description
A code injection vulnerability in the SecuSUITE Server Web Administration Portal of SecuSUITE versions 5.0.420 and earlier could allow an attacker to potentially inject script commands or other executable content into the server that would run with root privilege.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:A/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
在文件访问前对链接解析不恰当(链接跟随)
Source: CVE Program / CVE List V5
Vulnerability Title
BlackBerry SecuSUITE 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
BlackBerry SecuSUITE是加拿大黑莓（BlackBerry）公司的一种多平台解决方案，用于对语音通话和消息进行端到端加密。 BlackBerry SecuSUITE 5.0.420及之前版本存在安全漏洞，该漏洞源于存在代码注入漏洞，可能允许攻击者将脚本命令或其他可执行内容注入以root权限运行的服务器。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| BlackBerry | SecuSUITE | 5.0.420 | - |
|
II. Public POCs for CVE-2024-51721
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2024-51721
请登录查看更多情报信息。
Vendor Advisories for CVE-2024-51721 (1)
Same Patch Batch · BlackBerry · 2024-11-12 · 3 CVEs total
| CVE-2024-51722 | 6.4 MEDIUM | Vulnerabilities in SecuSUITE Server Components Impact SecuSUITE |
| CVE-2024-51720 | 4.8 MEDIUM | Vulnerabilities in SecuSUITE Server Components Impact SecuSUITE |
IV. Related Vulnerabilities
Same vendor: BlackBerry
-
CVE-2026-18247
DOM-Based Cross-Site Scripting in BlackBerry AtHoc Web Porta -
CVE-2026-18084
Cross-Site Scripting (XSS) in Management Console of BlackBer -
CVE-2026-18085
Improper Input Validation Leads to Arbitrary File Download a -
CVE-2025-12766
Insecure Direct Object Reference (IDOR) vulnerability in the -
CVE-2025-2474
Vulnerability in PCX Image Codec Impacts QNX Software Develo
Same weakness: CWE-59
-
CVE-2026-103263
Tornado before 6.5.9 StaticFileHandler Path Traversal via Sy -
CVE-2026-102113
Kiteworks Core Local Privilege Escalation -
CVE-2026-102118
Kiteworks Core before version 9.5.0 is vulnerable to Local P -
CVE-2026-81310
Linux图像扫描驱动存在链接跟随漏洞 -
CVE-2026-102242
Path Traversal via Symlink Following in allowedLocalRoots in
V. Comments for CVE-2024-51721
No comments yet