[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fCYZ_kDOW5o_xxlsDqCmgn0pzafxeqaZf_Hu4LClFiOY":3,"g5a-risk:CVE-2017-3891":133},{"success":4,"data":5,"meta":131},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":54,"epssPercentile":27,"epssTimeSeries":55,"severity":56,"affectedProducts":57,"affectedProductsCount":63,"references":64,"referencesCount":79,"weaknesses":80,"weaknessesCount":94,"isActivelyExploited":53,"cisaInfo":27,"otxData":27,"relatedBlogPosts":95,"seoMetadata":96,"configurations":121,"relatedVendorCves":129,"notableEvents":130},"CVE-2017-3891","What is CVE-2017-3891?","In BlackBerry QNX Software Development Platform (SDP) 6.6.0, an elevation of privilege vulnerability in the default configuration of the QNX SDP with QNet enabled on networks comprising two or more QNet nodes could allow an attacker to access local and remote files or take ownership of files on other QNX nodes regardless of permissions by executing commands targeting arbitrary nodes from a secondary QNX 6.6.0 QNet node.","In BlackBerry QNX Software Development Platform (SDP) 6.6.0, an elevation of privilege vulnerability in the default configuration of the QNX SDP with QNet en...","2017-11-14T21:29:00.62","2025-08-22T15:15:30.053",9.6,"CVSS:3.1\u002FAV:A\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:C\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":30,"CVSSMetricV2":42,"CVSSMetricV40":27},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":28,"ImpactScore":29},"secure@blackberry.com","Secondary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"3.1","ADJACENT_NETWORK","LOW","NONE","CHANGED","HIGH","CRITICAL",null,2.8,6,[31],{"Source":32,"Type":33,"CVSSData":34,"ExploitabilityScore":40,"ImpactScore":41},"nvd@nist.gov","Primary",{"Version":35,"VectorString":36,"AttackVector":37,"AttackComplexity":25,"PrivilegesRequired":23,"UserInteraction":23,"Scope":38,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":39,"BaseSeverity":25,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"3.0","CVSS:3.0\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H","NETWORK","UNCHANGED",8.1,2.2,5.9,[43],{"Source":32,"Type":33,"CVSSData":44,"BaseSeverity":47,"ExploitabilityScore":51,"ImpactScore":52,"ACInsufInfo":53,"ObtainAllPrivilege":53,"ObtainUserPrivilege":53,"ObtainOtherPrivilege":53,"UserInteractionRequired":53},{"Version":45,"VectorString":46,"AccessVector":37,"AccessComplexity":47,"Authentication":23,"ConfidentialityImpact":48,"IntegrityImpact":48,"AvailabilityImpact":48,"BaseScore":49,"BaseSeverity":50,"Exploitability":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"CollateralDamagePotential":27,"TargetDistribution":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"EnvironmentalScore":27},"2.0","AV:N\u002FAC:M\u002FAu:N\u002FC:P\u002FI:P\u002FA:P","MEDIUM","PARTIAL",6.8,"",8.6,6.4,false,0.01277,[54,54,54,54,54,54,54],"Critical",[58],{"vendor":59,"product":60,"version":61,"criteria":62,"vulnerable":4},"blackberry","qnx_software_development_platform","6.6.0","cpe:2.3:a:blackberry:qnx_software_development_platform:6.6.0:*:*:*:*:*:*:*",1,[65,71,75,77],{"url":66,"source":67,"tags":68},"http:\u002F\u002Fsupport.blackberry.com\u002Fkb\u002FarticleDetail?articleNumber=000046674","Blackberry",[69,70],"Mitigation","Vendor Advisory",{"url":72,"source":73,"tags":74},"https:\u002F\u002Fwww.midnightbluelabs.com\u002Fblog\u002F2017\u002F12\u002F8\u002Felevation-of-privilege-vulnerability-in-qnx-qnet","Midnightbluelabs",[],{"url":66,"source":67,"tags":76},[69,70],{"url":72,"source":73,"tags":78},[],4,[81,89],{"id":82,"name":83,"description":84,"extendedDescription":85,"status":86,"abstraction":87,"structure":88},"CWE-863","Incorrect Authorization","The product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check. This allows attackers to bypass intended access restrictions.","Assuming a user with a given identity, authorization is the process of determining whether that user can access a given resource, based on the user's privileges and any permissions or other access-control specifications that apply to the resource.\nWhen access control checks are incorrectly applied, users are able to access data or perform actions that they should not be allowed to perform. This can lead to a wide range of problems, including information exposures, denial of service, and arbitrary code execution.","Incomplete","Class","Simple",{"id":90,"name":91,"description":92,"extendedDescription":93,"status":86,"abstraction":87,"structure":88},"CWE-923","Improper Restriction of Communication Channel to Intended Endpoints","The product establishes a communication channel to (or from) an endpoint for privileged or protected operations, but it does not properly ensure that it is communicating with the correct endpoint.","Attackers might be able to spoof the intended endpoint from a different system or process, thus gaining the same level of access as the intended endpoint.\nWhile this issue frequently involves authentication between network-based clients and servers, other types of communication channels and endpoints can have this weakness.",2,[],{"title":97,"metaDescription":98,"keywords":99,"canonicalUrl":100,"structuredData":101},"What is CVE-2017-3891? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2017-3891, a critical severity cyber security vulnerability from 2017. In BlackBerry QNX Software Development Platform (SDP) 6....","CVE-2017-3891, CVE-2017-3891 vulnerability, CVE-2017-3891 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2017, CVSS score, exploit, patch, remediation, blackberry security, qnx_software_development_platform vulnerability","\u002Fwhat-is\u002Fcve-2017-3891",{"@context":102,"@type":103,"headline":97,"description":98,"datePublished":10,"dateModified":11,"author":104,"publisher":108,"about":112,"mainEntityOfPage":116,"articleSection":119,"keywords":120},"https:\u002F\u002Fschema.org","TechArticle",{"@type":105,"name":106,"url":107},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":105,"name":106,"url":107,"logo":109},{"@type":110,"url":111},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":113,"name":6,"description":114,"additionalType":115},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":117,"@id":118},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2017-3891","Cybersecurity","CVE-2017-3891, CVE-2017-3891 vulnerability, CVE-2017-3891 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[122],{"Operator":27,"Negate":27,"Nodes":123},[124],{"Operator":125,"Negate":53,"CPEMatch":126},"OR",[127],{"Vulnerable":4,"Criteria":62,"MatchCriteriaID":128,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"FF1D7FB0-C40B-4DD6-B3C5-D90FBCCBAF23",[],[],{"lastModified":11,"cacheTime":132,"version":45},1792375242262,{"score":134,"band":135,"action":136,"scoredAt":137},54,"Medium","Plan remediation","2026-10-16T06:42:56.105216+00:00"]