Vulnerability in Apple Iphone OS

CVE-2014-1350

Settings in Apple iOS before 7.1.2 allows physically proximate attackers to bypass an intended iCloud password requirement, and turn off the Find My iPhone service, by leveraging incorrect state management.

EPSS: 0.004 (31.5th percentile) — read the EPSS interpretation.

Affected products

Apple Iphone_os — versions 7.0, 7.0.1, 7.0.2
N/a — versions n/a

Weakness classification (CWE)

CWE-264

References

product-security@apple.com (vdb-entry, x_refsource_BID)
product-security@apple.com (vendor-advisory, x_refsource_APPLE)
product-security@apple.com (vdb-entry, x_refsource_SECTRACK)