Vulnerability in Apple Iphone Os

CVE-2010-1754

Passcode Lock in Apple iOS before 4 on the iPhone and iPod touch does not properly handle alert-based unlocks in conjunction with subsequent Remote Lock operations through MobileMe, which allows physically proximate attackers to bypass intended passcode requirements via unspecified vectors.

EPSS: 0.004 (28.9th percentile) — read the EPSS interpretation.

Affected products

Apple Iphone_os
Apple Ipod_touch
N/a — versions n/a

Weakness classification (CWE)

CWE-264

References

product-security@apple.com (x_refsource_CONFIRM, Vendor Advisory)
product-security@apple.com (Third Party Advisory, VDB Entry, vdb-entry, x_refsource_XF)
product-security@apple.com (Third Party Advisory, VDB Entry, vdb-entry, x_refsource_BID)
product-security@apple.com (vendor-advisory, x_refsource_APPLE, Mailing List, Vendor Advisory)