CVEvulnerability
CVE-2014-1350
4.6 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2014-07-01
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.6 MEDIUM — AV:L/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-264
Description
Settings in Apple iOS before 7.1.2 allows physically proximate attackers to bypass an intended iCloud password requirement, and turn off the Find My iPhone service, by leveraging incorrect state management.
Affected configurations
• apple iphone os (<= 7.1.1)
• apple iphone os 7.0
• apple iphone os 7.0.1
• apple iphone os 7.0.2
• apple iphone os 7.0.3
• apple iphone os 7.0.4
• apple iphone os 7.0.5
• apple iphone os 7.0.6
• apple iphone os 7.1
Related
Weakness · not in database (1)
References
- http://archives.neohapsis.com/archives/bugtraq/2014-06/0174.html archives.neohapsis.com
- http://www.securityfocus.com/bid/68276 www.securityfocus.com
- http://www.securitytracker.com/id/1030500 www.securitytracker.com
- http://archives.neohapsis.com/archives/bugtraq/2014-06/0174.html archives.neohapsis.com
- http://www.securityfocus.com/bid/68276 www.securityfocus.com
- http://www.securitytracker.com/id/1030500 www.securitytracker.com