Lucene search

K
cve[email protected]CVE-2014-1353
HistoryJul 01, 2014 - 10:17 a.m.

CVE-2014-1353

2014-07-0110:17:26
CWE-264
web.nvd.nist.gov
19
cve
apple
ios
lock screen
vulnerability
airplane mode
telephony
bypass
security
nvd

3.6 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:P/A:N

5.7 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

20.2%

Lock Screen in Apple iOS before 7.1.2 does not properly manage the telephony state in Airplane Mode, which allows physically proximate attackers to bypass the lock protection mechanism, and access a certain foreground application, via unspecified vectors.

Affected configurations

NVD
Node
appleiphone_osRange7.1.1
OR
appleiphone_osMatch7.0
OR
appleiphone_osMatch7.0.1
OR
appleiphone_osMatch7.0.2
OR
appleiphone_osMatch7.0.3
OR
appleiphone_osMatch7.0.4
OR
appleiphone_osMatch7.0.5
OR
appleiphone_osMatch7.0.6
OR
appleiphone_osMatch7.1

3.6 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:P/A:N

5.7 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

20.2%

Related for CVE-2014-1353