CVE-2007-3483
CVE-2007-3483 is a critical-severity vulnerability in Rim Blackberry Enterprise Server with a CVSS 2.0 base score of 10.0. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low.
Key facts
- Severity: Critical (CVSS 2.0 base score 10.0)
- EPSS exploit prediction: 1% (70th percentile)
- Actively exploited: Not listed in CISA KEV
- Affected product: Rim Blackberry Enterprise Server
- Published:
- Last modified:
Description
Research in Motion BlackBerry Enterprise Server 4.0 through 4.1 has a default configuration that permits installation of arbitrary third-party applications on BlackBerry devices, which might facilitate loading of malware.
Frequently asked questions
- What is CVE-2007-3483?
- Research in Motion BlackBerry Enterprise Server 4.0 through 4.1 has a default configuration that permits installation of arbitrary third-party applications on BlackBerry devices, which might facilitate loading of malware.
- How severe is CVE-2007-3483?
- CVE-2007-3483 has a CVSS 2.0 base score of 10.0, rated critical severity.
- Is CVE-2007-3483 being actively exploited?
- It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 1% (70th percentile), an estimate of the probability of exploitation in the next 30 days.
- What products are affected by CVE-2007-3483?
- CVE-2007-3483 primarily affects Rim Blackberry Enterprise Server. In total, 2 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.
- How do I fix CVE-2007-3483?
- Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its critical severity, prioritise patching exposed systems.
- When was CVE-2007-3483 published?
- CVE-2007-3483 was published on 2007-06-28 and last updated on 2026-06-16.
References
- http://www.blackberry.com/btsc/articles/968/KB05499_f.SAL_Public.html
- http://www.praetoriang.net/presentations/blackjack.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/35442
Affected products (2)
- cpe:2.3:a:rim:blackberry_enterprise_server:4.0:*:*:*:*:*:*:*
- cpe:2.3:a:rim:blackberry_enterprise_server:4.1:*:*:*:*:*:*:*
More vulnerabilities in Rim Blackberry Enterprise Server
- CVE-2010-2604 — Critical (CVSS 9.3): Multiple buffer overflows in the PDF Distiller in the BlackBerry Attachment Service component in Research In Motion…
- CVE-2009-4778 — Critical (CVSS 9.3): Multiple unspecified vulnerabilities in the PDF distiller in the Attachment Service component in Research In Motion…
- CVE-2009-2646 — Critical (CVSS 9.3): Multiple unspecified vulnerabilities in the PDF distiller in the Attachment Service component in Research In Motion…
- CVE-2009-2643 — Critical (CVSS 9.3): Multiple unspecified vulnerabilities in the PDF distiller in the Attachment Service component in Research In Motion…
- CVE-2008-3246 — Critical (CVSS 9.3): Unspecified vulnerability in the PDF distiller component in the BlackBerry Attachment Service in BlackBerry Unite! 1.0…
- CVE-2005-2342 — High (CVSS 7.8): Research in Motion (RIM) BlackBerry Router allows remote attackers to cause a denial of service (communication…