An issue was discovered in certain Apple products. iOS before 11 is affected. The issue involves the Exchange ActiveSync component. It allows remote attackers to erase a device in opportunistic circumstances by hijacking a cleartext AutoDiscover V1 session during the setup of an Exchange account.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Iphone_os | Apple | * | 10.3.3 (including) |