CVE-2020-6933 Denial of service in BlackBerry UEM
An attacker can cause a Denial of Service in the BlackBerry UEM Core service due to improper input validation.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2020-6933?
CVE-2020-6933 is a medium-severity denial of service vulnerability in BlackBerry UEM, published on 14 Oct 2020. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
An improper input validation vulnerability in the UEM Core of BlackBerry UEM version(s) 12.13.0, 12.12.1a QF2 (and earlier), and 12.11.1 QF3 (and earlier) could allow an attacker to potentially cause a Denial of Service (DoS) of the UEM Core service.
Weakness: CWE-20
Which versions are affected by CVE-2020-6933?
It affects 1 product.
Products include Blackberry Unified Endpoint Manager.
How do I fix CVE-2020-6933?
No fix has been published for CVE-2020-6933 yet. Limit exposure of the affected software until one is available.
Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.
Is CVE-2020-6933 being exploited?
There is no known exploitation of CVE-2020-6933 in the wild and no public exploit code.
Other vulnerabilities in BlackBerry UEM
- CVE-2026-18084 Cross-Site Scripting (XSS) in Management Console of BlackBerry UEM
- CVE-2018-8890 Information disclosure in UEM
- CVE-2018-8892 Cross-site request forgery in BlackBerry UEM
- CVE-2017-17442 Cross-site scripting in UEM Management Console
- CVE-2026-18085 Improper Input Validation Leads to Arbitrary File Download and Potential Denial of Service in BlackBerry UEM
Sources
Also known as GHSA-v6hh-vv2p-58p6.