Vulnerability Name: | CVE-2014-1287 (CCN-91709) | ||||||||
Assigned: | 2014-03-11 | ||||||||
Published: | 2014-03-11 | ||||||||
Updated: | 2019-03-08 | ||||||||
Summary: | USB Host in Apple iOS before 7.1 and Apple TV before 6.1 allows physically proximate attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted USB messages. | ||||||||
CVSS v3 Severity: | 5.9 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)
| ||||||||
CVSS v2 Severity: | 7.2 High (CVSS v2 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C) 5.3 Medium (Temporal CVSS v2 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C/E:U/RL:OF/RC:C)
3.4 Low (CCN Temporal CVSS v2 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P/E:U/RL:OF/RC:C)
| ||||||||
Vulnerability Type: | CWE-119 | ||||||||
Vulnerability Consequences: | Gain Access | ||||||||
References: | Source: MITRE Type: CNA CVE-2014-1287 Source: CCN Type: Apple Web site About the security content of iOS 7.1 Source: CONFIRM Type: Vendor Advisory http://support.apple.com/kb/HT6162 Source: CONFIRM Type: Vendor Advisory http://support.apple.com/kb/HT6163 Source: XF Type: UNKNOWN appleios-cve20141287-code-exec(91709) Source: CCN Type: Packet Storm Security [03-14-2014] iOS 7 Arbitrary Code Execution Source: EXPLOIT-DB Type: EXPLOIT Offensive Exploit Database [03-14-2014] | ||||||||
Vulnerable Configuration: | Configuration 1: Configuration 2: ![]() | ||||||||
BACK |