Описание
Apple iOS before 8.1.1 does not properly enforce the failed-passcode limit, which makes it easier for physically proximate attackers to bypass the lock-screen protection mechanism via a series of guesses.
Ссылки
- Vendor Advisory
- Vendor Advisory
- Vendor Advisory
- Vendor Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 8.1 (включая)
Одно из
cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:iphone_os:8.0:*:*:*:*:*:*:*
cpe:2.3:o:apple:iphone_os:8.0.1:*:*:*:*:*:*:*
cpe:2.3:o:apple:iphone_os:8.0.2:*:*:*:*:*:*:*
EPSS
Процентиль: 22%
0.00072
Низкий
7.2 High
CVSS2
Дефекты
CWE-264
Связанные уязвимости
github
больше 3 лет назад
Apple iOS before 8.1.1 does not properly enforce the failed-passcode limit, which makes it easier for physically proximate attackers to bypass the lock-screen protection mechanism via a series of guesses.
EPSS
Процентиль: 22%
0.00072
Низкий
7.2 High
CVSS2
Дефекты
CWE-264