In BlackBerry QNX Software Development Platform (SDP) 6.6.0, an elevation of privilege vulnerability in the default configuration of the QN…

Published 8 y ago 2017-11-14 · modified 4 mo ago 2026-06-17 · JSON

CVSS

9.6

v3.1 · CNA

CISA KEV

not known exploited

EPSS

1.3%

percentile 70%

Public exploits

none known

In BlackBerry QNX Software Development Platform (SDP) 6.6.0, an elevation of privilege vulnerability in the default configuration of the QNX SDP with QNet enabled on networks comprising two or more QNet nodes could allow an attacker to access local and remote files or take ownership of files on other QNX nodes regardless of permissions by executing commands targeting arbitrary nodes from a secondary QNX 6.6.0 QNet node.

Exploit prediction (EPSS)

1.28% probability of exploitation in the next 30 days, higher than 70% of all scored CVEs.

CVSS scores

Assigned by	Version	Score	Vector
CNA	3.1	9.6	`CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H`
CNA	3.1	9.6	`CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H`
NVD	3.0	8.1	`CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H`
NVD	2.0	6.8	`AV:N/AC:M/Au:N/C:P/I:P/A:P`

Affected products

BlackBerry QNX Software Development Platform (QNX SDP)

Classification

Weakness

CWE-923 Improper Restriction of Communication Channel to Intended Endpoints
CWE-863 Incorrect Authorization

References

support.blackberry.com /kb/articleDetail?articleNumber=000046674 · x_refsource_CONFIRM, x_transferred
midnightbluelabs.com /blog/2017/12/8/elevation-of-privilege-vulnerability-in-qnx-qnet · x_refsource_MISC, x_transferred

Sources

CVE List: CVE-2017-3891
NVD: CVE-2017-3891

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.