Vulnerability in Apple Iphone OS
CVE-2017-7145
An issue was discovered in certain Apple products. iOS before 11 is affected. The issue involves the "Time" component. The "Setting Time Zone" feature mishandles the possibility of using location data.
EPSS: 0.008 (52.2th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 5.3 (Medium). Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N.
Affected products
- Apple Iphone_os
- N/a — versions n/a
Weakness classification (CWE)
References
- product-security@apple.com (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_BID)
- product-security@apple.com (x_refsource_CONFIRM, Vendor Advisory)
Frequently asked questions
- What is CVE-2017-7145?
- CVE-2017-7145 is a medium-severity vulnerability in Apple Iphone OS, classified under Permission Issues. CVSS score: 5.3/10. Published 2017-10-23.
- How severe is CVE-2017-7145?
- Medium severity. CVSS v3 base score is 5.3 out of 10.