← Vulnerability feed

Vulnerability record · CVE-2016-3128 · published 13 January 2017

CVE-2016-3128: Blackberry enterprise service vulnerability

Blackberry · Enterprise Service

A spoofing vulnerability in the Core of BlackBerry Enterprise Server (BES) 12 through 12.5.2 allows remote attackers to enroll an illegitimate device to the BES, gain access to device parameters for the BES, or send false information to the BES by gaining access to specific information about a device that was legitimately enrolled on the BES.

8.2 CVSS 3.0 High EPSS 1.9% · top 21.5% CWE-254 · CWE-254
8.2CVSS 3.0 base score, v2 6.4
1.9%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
6References
17 Jun 2026Last modified by NVD

Description

A spoofing vulnerability in the Core of BlackBerry Enterprise Server (BES) 12 through 12.5.2 allows remote attackers to enroll an illegitimate device to the BES, gain access to device parameters for the BES, or send false information to the BES by gaining access to specific information about a device that was legitimately enrolled on the BES.

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://support.blackberry.com/kb/articleDetail?articleNumber=000038913 MitigationVendor Advisory
http://www.securityfocus.com/bid/95624
http://www.securitytracker.com/id/1037585
http://support.blackberry.com/kb/articleDetail?articleNumber=000038913 MitigationVendor Advisory
http://www.securityfocus.com/bid/95624
http://www.securitytracker.com/id/1037585

Track CVE-2016-3128 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

8.1CVE-2016-3130Blackberry enterprise service information exposure vulnerabilityAn information disclosure vulnerability in the Core and Management Console in BlackBerry Enterprise Server (BES) 12 through 12.5.2 allows remote atta…EPSS 2.1%6.1CVE-2017-3894Blackberry enterprise service cross-site scripting vulnerabilityA stored cross site scripting vulnerability in the Management Console of BlackBerry Unified Endpoint Manager version 12.6.1 and earlier, and all vers…EPSS 0.85%

Source: NIST National Vulnerability Database (record CVE-2016-3128), CISA KEV, FIRST EPSS (scores of 2026-09-29). This page is refreshed as NVD updates the record.