Vulnerability Description
Settings in Apple iOS before 7.1.2 allows physically proximate attackers to bypass an intended iCloud password requirement, and turn off the Find My iPhone service, by leveraging incorrect state management.
CVSS Score
4.6
MEDIUM
AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Apple | Iphone Os | <= 7.1.1 |
Related Weaknesses (CWE)
References
- http://archives.neohapsis.com/archives/bugtraq/2014-06/0174.html
- http://www.securityfocus.com/bid/68276
- http://www.securitytracker.com/id/1030500
- http://archives.neohapsis.com/archives/bugtraq/2014-06/0174.html
- http://www.securityfocus.com/bid/68276
- http://www.securitytracker.com/id/1030500
FAQ
What is CVE-2014-1350?
CVE-2014-1350 is a vulnerability with a CVSS score of 4.6 (MEDIUM). Settings in Apple iOS before 7.1.2 allows physically proximate attackers to bypass an intended iCloud password requirement, and turn off the Find My iPhone service, by leveraging incorrect state manag...
How severe is CVE-2014-1350?
CVE-2014-1350 has been rated MEDIUM with a CVSS base score of 4.6/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2014-1350?
Check the references section above for vendor advisories and patch information. Affected products include: Apple Iphone Os.