Lucene search

AppleCVE-2017-7140

HistoryOct 23, 2017 - 1:29 a.m.

CVE-2017-7140

2017-10-2301:29:13

CWE-200

apple

web.nvd.nist.gov

cve-2017-7140

apple products

ios

keyboard suggestions

vulnerability

security issue

nvd

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

CVSS3

5.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

AI Score

5.1

Confidence

Low

EPSS

0.001

Percentile

32.1%

JSON

An issue was discovered in certain Apple products. iOS before 11 is affected. The issue involves the “Keyboard Suggestions” component. It allows attackers to obtain sensitive information by reading keyboard autocorrect suggestions.

Affected configurations

Nvd

Node

appleiphone_osRange≤10.3.3

VendorProductVersionCPE
appleiphone_os*cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
apple	iphone_os	*	cpe:2.3:o:apple:iphone_os::::::::

References

www.securityfocus.com/bid/101000

support.apple.com/HT208112

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

CVSS3

5.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

AI Score

5.1

Confidence

Low

EPSS

0.001

Percentile

32.1%

JSON

Related for CVE-2017-7140