CVE-2014-1351 — Apple Iphone OS vulnerability

CWE-2643 documents3 sources
Severity
3.6LOWNVD
EPSS
0.1%
top 79.47%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Apple Iphone OS
Timeline
PublishedJul 1
Latest updateMay 17

Description

Siri in Apple iOS before 7.1.2 allows physically proximate attackers to bypass an intended lock-screen passcode requirement, and read a contact list, via a Siri request that refers to a contact ambiguously.

CVSS vector

AV:L/AC:L/C:P/I:P/A:NExploitability: 3.9 | Impact: 4.9

Affected Packages1 packages

▶NVDapple/iphone_os7.1.1+8

🔴Vulnerability Details

1
GHSA
GHSA-7c2w-fcqx-c393: Siri in Apple iOS before 7↗2022-05-17
▶

💬Community

1
Bugzilla
CVE-2014-0168 Jolokia: cross-site request forgery (CSRF)↗2014-04-07
▶
CVE-2014-1351 — Apple Iphone OS vulnerability | cvebase