CVE-2024-51720

4.8 mediumEPSS 0.3%

Medium (4.8). EPSS 0.3% chance of exploitation in the next 30 days.

An insufficient entropy vulnerability in the SecuSUITE Secure Client Authentication (SCA) Server of SecuSUITE versions 5.0.420 and earlier could allow an attacker to potentially enroll an attacker-controlled device to the victim’s account and telephone number.

Severity

CVSS 3.1

4.8 medium

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 24% of CVEs (scores of 2026-10-31)
CWEs: CWE-307, CWE-334
Published: 2024-11-12
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

References

https://support.blackberry.com/pkb/s/article/140220

Check your stack JSON