VULNERABILITY INTELLIGENCE
CVE-2021-22153
CVSS score7.3 HIGH
EPSS probability0.96%
CISA KEVNot currently listed
Published2021-05-13
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
Description
A Remote Code Execution vulnerability in the Management Console component of BlackBerry UEM version(s) 12.13.1 QF2 and earlier and 12.12.1a QF6 and earlier could allow an attacker to potentially cause the spreadsheet application to run commands on the victim’s local machine with the authority of the user.
Weakness classification
- nvd@nist.gov: CWE-1236
Primary references
- secure@blackberry.com — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory