CVEvulnerability
CVE-2014-1360
2.1 LOW
Official page ↗
- Status
- Modified
- Published
- 2014-07-01
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 2.1 LOW — AV:L/AC:L/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-20
Description
Lockdown in Apple iOS before 7.1.2 does not properly verify data from activation servers, which makes it easier for physically proximate attackers to bypass the Activation Lock protection mechanism via unspecified vectors.
Affected configurations
• apple iphone os (<= 7.1.1)
• apple iphone os 7.0
• apple iphone os 7.0.1
• apple iphone os 7.0.2
• apple iphone os 7.0.3
• apple iphone os 7.0.4
• apple iphone os 7.0.5
• apple iphone os 7.0.6
• apple iphone os 7.1
Related
Weakness · CWE (1)
- CWE-20 Improper Input Validation weakness
References
- http://archives.neohapsis.com/archives/bugtraq/2014-06/0174.html archives.neohapsis.com
- http://archives.neohapsis.com/archives/bugtraq/2014-09/0106.html archives.neohapsis.com
- http://support.apple.com/kb/HT6441 support.apple.com
- http://www.securityfocus.com/bid/68276 www.securityfocus.com
- http://www.securitytracker.com/id/1030500 www.securitytracker.com
- http://archives.neohapsis.com/archives/bugtraq/2014-06/0174.html archives.neohapsis.com
- http://archives.neohapsis.com/archives/bugtraq/2014-09/0106.html archives.neohapsis.com
- http://support.apple.com/kb/HT6441 support.apple.com
- http://www.securityfocus.com/bid/68276 www.securityfocus.com
- http://www.securitytracker.com/id/1030500 www.securitytracker.com