Lucene search

K
cve[email protected]CVE-2015-3726
HistoryJul 03, 2015 - 2:00 a.m.

CVE-2015-3726

2015-07-0302:00:17
CWE-20
web.nvd.nist.gov
20
cve-2015-3726
apple ios
telephony subsystem
security vulnerability
arbitrary code execution
sim card
uim card
nvd

4.6 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

7 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

33.0%

The Telephony subsystem in Apple iOS before 8.4 allows physically proximate attackers to execute arbitrary code via a crafted (1) SIM or (2) UIM card.

Affected configurations

NVD
Node
appleiphone_osRange8.3
CPENameOperatorVersion
apple:iphone_osapple iphone osle8.3

4.6 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

7 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

33.0%

Related for CVE-2015-3726