CVE-2017-3891

Critical

Published: 14/11/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

In BlackBerry QNX Software Development Platform (SDP) 6.6.0, there is an elevation of privilege vulnerability in the default configuration with QNet enabled that could allow an attacker to access local and remote files or take ownership of files on other QNX nodes.

Risk Assessment

This vulnerability could lead to unauthorized access to data and control over files in the network, posing a serious security threat to the organization.

Recommendation

It is recommended to update to the latest version of QNX SDP and review the QNet configuration to restrict access to nodes and files.

Original NVD description (English source)

In BlackBerry QNX Software Development Platform (SDP) 6.6.0, an elevation of privilege vulnerability in the default configuration of the QNX SDP with QNet enabled on networks comprising two or more QNet nodes could allow an attacker to access local and remote files or take ownership of files on other QNX nodes regardless of permissions by executing commands targeting arbitrary nodes from a secondary QNX 6.6.0 QNet node.