EMM

Contribute

Enterprise Mobility Management (EMM) systems are a common way of managing mobile devices in the enterprise. Although not a security technology by itself, EMMs can help to deploy policies to an enterprise's device pool and to monitor device state.

Threat List

• EMM application on the mobile device fails to validate digital certificate
• A user of one organization's EMM instance is able to access information from another organization's EMM instance.
• Insecure internally developed enterprise app installed onto enrolled devices via MAM policy
• Unauthorized access to EMM/MDM administrative console, for instance by exploiting EMM/MDM vulnerabilities
• Impersonating the EMM/MDM server to an enrolled device to execute unauthorized actions, such as triggering a device wipe or installing a malicious MDM profile
• Insecure handling of sensitive user data (e.g. domain authentication credentials) by EMM/MDM solution
• A compromised or rooted device bypasses root/jailbreak or other compliance checks
• An attacker enrolls a mobile device into an EMM/MDM without authorization of the device's owner, which facilitates further attacks against the device or tracking user behavior
• End user privacy incursions by an administrator or attacker with administrative access to the EMM/MDM administrative console (e.g., tracking device location, call logs, text messages, personal contacts, etc.)
• Unauthorized or unintentional wiping of personal user data from devices
• Enterprise data synchronized to unmanaged and potentially insecure 3rd party cloud services