Lucene search

K
nvd[email protected]NVD:CVE-2014-4367
HistorySep 18, 2014 - 10:55 a.m.

CVE-2014-4367

2014-09-1810:55:09
CWE-264
web.nvd.nist.gov

2.1 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:L/AC:L/Au:N/C:N/I:P/A:N

5.7 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

25.0%

Apple iOS before 8 enables Voice Dial during all upgrade actions, which makes it easier for physically proximate attackers to launch unintended calls by speaking a telephone number.

Affected configurations

NVD
Node
appleiphone_osRange7.1.2
OR
appleiphone_osMatch7.0
OR
appleiphone_osMatch7.0.1
OR
appleiphone_osMatch7.0.2
OR
appleiphone_osMatch7.0.3
OR
appleiphone_osMatch7.0.4
OR
appleiphone_osMatch7.0.5
OR
appleiphone_osMatch7.0.6
OR
appleiphone_osMatch7.1
OR
appleiphone_osMatch7.1.1

2.1 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:L/AC:L/Au:N/C:N/I:P/A:N

5.7 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

25.0%

Related for NVD:CVE-2014-4367