CVE-2015-3756 — Apple Iphone OS vulnerability

CWE-2543 documents3 sources
Severity
2.1LOWNVD
EPSS
0.0%
top 88.95%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Apple Iphone OSApple IOS
Timeline
PublishedAug 16
Latest updateMay 17

Description

The Certificate UI in Apple iOS before 8.4.1 does not prevent X.509 certificate acceptance within the lock screen, which allows physically proximate attackers to establish arbitrary certificate trust relationships by completing a dialog.

CVSS vector

AV:L/AC:L/C:N/I:P/A:NExploitability: 3.9 | Impact: 2.9

Affected Packages2 packages

▶Appleapple/ios8.4.1

🔴Vulnerability Details

1
GHSA
GHSA-f78v-998h-4wvx: The Certificate UI in Apple iOS before 8↗2022-05-17
▶

📋Vendor Advisories

1
Apple
CVE-2015-3756: iOS 8.4.1↗
▶
CVE-2015-3756 — Apple Iphone OS vulnerability | cvebase