5.8 Medium
CVSS2
Attack Vector
ADJACENT_NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:A/AC:L/Au:N/C:P/I:P/A:P
5.9 Medium
AI Score
Confidence
Low
0.012 Low
EPSS
Percentile
85.2%
The WifiPasswordController generateDefaultPassword method in Preferences in Apple iOS 6 and earlier relies on the UITextChecker suggestWordInLanguage method for selection of Wi-Fi hotspot WPA2 PSK passphrases, which makes it easier for remote attackers to obtain access via a brute-force attack that leverages the insufficient number of possible passphrases.
lists.apple.com/archives/security-announce/2013/Sep/msg00006.html
lists.owasp.org/pipermail/owasp-mobile-security-project/2013-June/000640.html
secunia.com/advisories/54886
support.apple.com/kb/HT5934
www.securitytracker.com/id/1029054
www1.cs.fau.de/filepool/projects/hotspot/hotspot.pdf
www1.cs.fau.de/hotspot