EMM

Contribute

Enterprise Mobility Management (EMM) systems are a common way of managing mobile devices in the enterprise. Although not a security technology by itself, EMMs can help to deploy policies to an enterprise's device pool and to monitor device state.

Threat List

• EMM application on the mobile device fails to validate digital certificate
• A user of one organization's EMM instance is able to access information from another organization's EMM instance.
• Unauthorized access to EMM/MDM administrative console, for instance by exploiting EMM/MDM vulnerabilities
• Impersonating the EMM/MDM server to an enrolled device to execute unauthorized actions, such as triggering a device wipe or installing a malicious MDM profile
• Insecure handling of sensitive user data (e.g. domain authentication credentials) by EMM/MDM solution
• A compromised or rooted device bypasses root/jailbreak or other compliance checks
• An attacker enrolls a mobile device into an EMM/MDM without authorization of the device's owner, which facilitates further attacks against the device or tracking user behavior
• End user privacy incursions by an administrator or attacker with administrative access to the EMM/MDM administrative console (e.g., tracking device location, call logs, text messages, personal contacts, etc.)
• Unauthorized or unintentional wiping of personal user data from devices
• Enterprise data synchronized to unmanaged and potentially insecure 3rd party cloud services
• Insecure internally developed enterprise app installed onto enrolled devices via MAM policy

---

Privacy Policy | Security Notice | Accessibility Statement | Disclaimer | Send Feedback
_{Each organization is unique in its risk posture and cybersecurity needs. Mobile device users should consult with their organization’s security team before implementing mitigations or resolutions outlined on this website to avoid potential conflicts with their organization's processes or environments.}