CVE-2024-51720
An insufficient entropy vulnerability in the SecuSUITE Secure Client Authentication (SCA) Server of SecuSUITE versions 5.0.420 and earlier could allow an attacker to potentially enroll an attacker-controlled device to the victim’s account and telephone number.
Scoring
- Severity
- MEDIUM
- CVSS base score
- 4.8
- CVSS vector
- CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N
- EPSS probability
- 0.32%
- CWE
- CWE-307, CWE-334
- Published
- 2024-11-12
- Last modified
- 2026-03-13
Affected products
- BlackBerry SecuSUITE
Weakness type
Related vulnerabilities
- CVE-2026-88770 — Keycloak-services: keycloak-services: device authorization grant issues tokens to brute-force-locked accounts
- CVE-2026-78490 — Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to...
- CVE-2026-86729 — WWBN AVideo Unrestricted Authentication Attempts via get_api_preauthorize
- CVE-2026-6223 — OTP Bypass in Bahçelievler Muncipality's BiHayat App
- CVE-2026-20514 — In Audio HAL, there is a possible information disclosure due to a missing permission check. This...
- CVE-2026-20512 — In Audio HAL, there is a possible escalation of privilege due to improper input validation. This...
- CVE-2026-86186 — AVideo API Rate Limit Bypass via Bot User-Agent Header
- CVE-2026-85237 — Missing Rate Limiting in Email OTP Verification Allows Brute-Force Authentication Bypass