CVE-2017-2498 — HIGH (7.5) — White Hats Nepal

Q: How severe is CVE-2017-2498?

CVE-2017-2498 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.

Q: Is there a patch for CVE-2017-2498?

Check the references section above for vendor advisories and patch information. Affected products include: Apple Iphone Os.

Vulnerability Description

An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. The issue involves the "Security" component. It allows attackers to bypass intended access restrictions via an untrusted certificate.

CVSS Score

7.5

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality

NONE

Integrity

HIGH

Availability

NONE

Affected Products

Vendor	Product	Versions
Apple	Iphone Os	<= 10.3.1

Related Weaknesses (CWE)

CWE-295

References

http://www.securityfocus.com/bid/98479Third Party AdvisoryVDB Entry
http://www.securitytracker.com/id/1038485
https://support.apple.com/HT207798Vendor Advisory
http://www.securityfocus.com/bid/98479Third Party AdvisoryVDB Entry
http://www.securitytracker.com/id/1038485
https://support.apple.com/HT207798Vendor Advisory

FAQ

What is CVE-2017-2498?

CVE-2017-2498 is a vulnerability with a CVSS score of 7.5 (HIGH). An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. The issue involves the "Security" component. It allows attackers to bypass intended access restrictions via an untrust...

How severe is CVE-2017-2498?

CVE-2017-2498 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2017-2498?

Check the references section above for vendor advisories and patch information. Affected products include: Apple Iphone Os.