CVE-2014-6611 - CVE House
Back to Database
Status published Medium CVE-2014-6611

The BlackBerry World app before 5.0.0.262 on BlackBerry 10 OS...

Vulnerability Description

The BlackBerry World app before 5.0.0.262 on BlackBerry 10 OS 10.2.0, before 5.0.0.263 on BlackBerry 10 OS 10.2.1, and before 5.1.0.53 on BlackBerry 10 OS 10.3.0 does not properly validate download/update requests, which allows user-assisted man-in-the-middle attackers to spoof servers and trigger the download of a crafted app by modifying the client-server data stream.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2014-6611

Credits & Attribution

No credits recorded in the NVD database.

References

More from blackberry

View All →
CVE-2021-22155
An Authentication Bypass vulnerability in the SAML Authentication component of...
High 8.8
CVE-2021-22154
An Information Disclosure vulnerability in the Management Console component of...
Medium 5.3
CVE-2021-22153
A Remote Code Execution vulnerability in the Management Console component...
High 7.3
CVE-2021-22152
A Denial of Service due to Improper Input Validation vulnerability...
Medium 5.5
CVE-2016-3126
Cross-site scripting (XSS) vulnerability in the Management Console in BlackBerry...
Medium 6.1

Affected Vendor

Affected Software

blackberry world, blackberry os
Vulnerable Versions:
0, 10.3.0, 10.2.1, 10.2.0

Timeline

Official Publish: October 25th, 2014
Last Modified: August 6th, 2024
Added to House: July 19th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.