Vulnerability Intelligence Report
CVE-2020-6932
An information disclosure and remote code execution vulnerability in the slinger web server of the BlackBerry QNX Software Development Platform versions 6.4.0 to 6.6.0 could allow an attacker to potentially read arbitrary files and run arbitrary executables in the context of the web server.
No Active Exploit Signals
CVSS Base Score
10.0
CRITICAL
Exploitability:3.9
Impact Score:6.0
EPSS Probability:3.59%
Executive Threat Verdict
Evaluating...
Evaluating Threat Landscape...
Assessing known weaponization, exploitation telemetry, and federal advisories.
Attack Surface
—
Authentication
—
Weaponization
—
SSVC Action
—
Weaknesses (CWE)
CWE-150 ↗CWE-150 Improper Neutralization of Escape, Meta, or Control Sequences
Affected Products & Versions
| Vendor | Product | Affected Versions |
|---|---|---|
| BlackBerry | QNX Software Development Platform (SDP) | 6.4.0 <= 6.6.0 (affected) |
References & Technical Advisories
No reference links found.
Threat Intelligence Signals
EPSS Score
3.589%
GitHub Advisory
Identity & Timeline
| Status | PUBLISHED |
| Assigning Authority | BlackBerry · Vendor · Canada |
| Reserved | 2020-01-13T00:00:00 |
| Published | 2020-08-12T12:21:32 |
| Last Updated | 2025-08-22T15:16:18 |
Community Chatter & Buzz