Lucene search

K
cve[email protected]CVE-2014-1350
HistoryJul 01, 2014 - 10:17 a.m.

CVE-2014-1350

2014-07-0110:17:26
CWE-264
web.nvd.nist.gov
18
cve-2014-1350
apple ios
security
icloud
find my iphone
vulnerability
nvd

4.6 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

6 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

20.8%

Settings in Apple iOS before 7.1.2 allows physically proximate attackers to bypass an intended iCloud password requirement, and turn off the Find My iPhone service, by leveraging incorrect state management.

Affected configurations

NVD
Node
appleiphone_osRange7.1.1
OR
appleiphone_osMatch7.0
OR
appleiphone_osMatch7.0.1
OR
appleiphone_osMatch7.0.2
OR
appleiphone_osMatch7.0.3
OR
appleiphone_osMatch7.0.4
OR
appleiphone_osMatch7.0.5
OR
appleiphone_osMatch7.0.6
OR
appleiphone_osMatch7.1

4.6 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

6 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

20.8%

Related for CVE-2014-1350