Lucene search

K
cve[email protected]CVE-2014-1360
HistoryJul 01, 2014 - 10:17 a.m.

CVE-2014-1360

2014-07-0110:17:26
CWE-20
web.nvd.nist.gov
27
apple
ios
7.1.2
activation lock
bypass
vulnerability
cve-2014-1360
nvd

2.1 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:L/AC:L/Au:N/C:N/I:P/A:N

5.5 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

26.0%

Lockdown in Apple iOS before 7.1.2 does not properly verify data from activation servers, which makes it easier for physically proximate attackers to bypass the Activation Lock protection mechanism via unspecified vectors.

Affected configurations

NVD
Node
appleiphone_osRange7.1.1
OR
appleiphone_osMatch7.0
OR
appleiphone_osMatch7.0.1
OR
appleiphone_osMatch7.0.2
OR
appleiphone_osMatch7.0.3
OR
appleiphone_osMatch7.0.4
OR
appleiphone_osMatch7.0.5
OR
appleiphone_osMatch7.0.6
OR
appleiphone_osMatch7.1

2.1 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:L/AC:L/Au:N/C:N/I:P/A:N

5.5 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

26.0%

Related for CVE-2014-1360