ID

VAR-E-201601-0317


CVE

cve_id:CVE-2015-6841

Trust: 0.3

sources: BID: 80023

TITLE

Silent Circle Blackphone CVE-2015-6841 Security Bypass Vulnerability

Trust: 0.3

sources: BID: 80023

DESCRIPTION

Silent Circle Blackphone is prone to a security-bypass vulnerability.
An attacker can exploit this issue to bypass certain security restrictions and perform unauthorized actions. Successful exploits may lead to other attacks.

Trust: 0.3

sources: BID: 80023

AFFECTED PRODUCTS

vendor:silentmodel:circle blackphonescope:eqversion:1

Trust: 0.3

vendor:silentmodel:circle blackphone rc3scope:neversion:1.1.13

Trust: 0.3

sources: BID: 80023

EXPLOIT

The researcher who discovered this issue has created a proof-of-concept. Please see the references for more information.

Trust: 0.3

sources: BID: 80023

PRICE

Free

Trust: 0.3

sources: BID: 80023

TYPE

Design Error

Trust: 0.3

sources: BID: 80023

CREDITS

Caleb Fenton, Jacob Soo and Jon Sawyer of Red Naga.

Trust: 0.3

sources: BID: 80023

EXTERNAL IDS

db:NVDid:CVE-2015-6841

Trust: 0.3

db:BIDid:80023

Trust: 0.3

sources: BID: 80023

REFERENCES

url:https://www.sentinelone.com/blog/vulnerability-in-blackphone-puts-devices-at-risk-for-takeover/

Trust: 0.3

url:https://www.silentcircle.com/products-and-solutions/devices/

Trust: 0.3

sources: BID: 80023

SOURCES

db:BIDid:80023

LAST UPDATE DATE

2022-07-27T09:51:52.298000+00:00


SOURCES UPDATE DATE

db:BIDid:80023date:2016-01-06T00:00:00

SOURCES RELEASE DATE

db:BIDid:80023date:2016-01-06T00:00:00