CVE Vulnerabilities

CVE-2014-1350

Published: Jul 01, 2014 | Modified: Jan 07, 2017
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
4.6 MEDIUM
AV:L/AC:L/Au:N/C:P/I:P/A:P
RedHat/V2
RedHat/V3
Ubuntu

Settings in Apple iOS before 7.1.2 allows physically proximate attackers to bypass an intended iCloud password requirement, and turn off the Find My iPhone service, by leveraging incorrect state management.

Affected Software

Name Vendor Start Version End Version
Iphone_os Apple * 7.1.1 (including)
Iphone_os Apple 7.0 (including) 7.0 (including)
Iphone_os Apple 7.0.1 (including) 7.0.1 (including)
Iphone_os Apple 7.0.2 (including) 7.0.2 (including)
Iphone_os Apple 7.0.3 (including) 7.0.3 (including)
Iphone_os Apple 7.0.4 (including) 7.0.4 (including)
Iphone_os Apple 7.0.5 (including) 7.0.5 (including)
Iphone_os Apple 7.0.6 (including) 7.0.6 (including)
Iphone_os Apple 7.1 (including) 7.1 (including)

References