Vulnerability 82343 - CERT Civis.Net

Vulnerability Name:

CCN-82343

Published:

2013-02-22

Updated:

2013-02-22

Summary:

Apple iOS could allow a local attacker to bypass security restrictions, caused by the failure to restrict access to locked devices. An attacker could exploit this vulnerability to bypass the lock screen and gain unauthorized access to the device.

CVSS v3 Severity:

4.0 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)

Exploitability Metrics:	Attack Vector (AV): Local Attack Complexity (AC): Low Privileges Required (PR): None User Interaction (UI): None
Scope:	Scope (S): Unchanged
Impact Metrics:	Confidentiality (C): None Integrity (I): Low Availibility (A): None

CVSS v2 Severity:

2.1 Low (CCN CVSS v2 Vector: AV:L/AC:L/Au:N/C:N/I:P/A:N)
1.7 Low (CCN Temporal CVSS v2 Vector: AV:L/AC:L/Au:N/C:N/I:P/A:N/E:U/RL:U/RC:UR)

Exploitability Metrics:	Access Vector (AV): Local Access Complexity (AC): Low Athentication (Au): None
Impact Metrics:	Confidentiality (C): None Integrity (I): Partial Availibility (A): None

Vulnerability Consequences:

Bypass Security

References:

Source: CCN
Type: Apple Web site
Apple

Source: CCN
Type: BID-57990
Apple iOS Code Lock Security Bypass Vulnerability

Source: CCN
Type: Vulnerability-Lab Web site
Apple iOS v6.1 (10B143) - Pass Code Bypass Vulnerability 2

Source: XF
Type: UNKNOWN
appleios-screen-security-bypass(82343)

Vulnerable Configuration:

Configuration CCN 1:

cpe:/o:apple:ios:6.1:*:*:*:*:*:*:*

Denotes that component is vulnerable

BACK