CVE-2024-51720

Description

An insufficient entropy vulnerability in the SecuSUITE Secure Client Authentication (SCA) Server of SecuSUITE versions 5.0.420 and earlier could allow an attacker to potentially enroll an attacker-controlled device to the victim’s account and telephone number.

PUBLISHED Reserved 2024-10-30 | Published 2024-11-12 | Updated 2025-09-11 | Assigner blackberry

Problem types

CWE-307 Improper Restriction of Excessive Authentication Attempts

CWE-334 Small Space of Random Values

Product status

References

support.blackberry.com/pkb/s/article/140220

cve.org (CVE-2024-51720)

nvd.nist.gov (CVE-2024-51720)

Download JSON