« Volver al listado

CVE-2014-1350

Estado: ModificadaMedia (4.6)—

Settings en Apple iOS anterior a 7.1.2 permite a atacantes físicamente próximos evadir un requisito de contraseña iCloud, y apagar el servicio Find My iPhone, mediante el aprovechamiento de la gestión del estado incorrecta.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Apple — Iphone OS

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2014-1350",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 4.6,
          "accessVector": "LOCAL",
          "vectorString": "AV:L/AC:L/Au:N/C:P/I:P/A:P",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "LOW",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 6.4,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 3.9,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "product-security@apple.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2014-07-01T10:17:26.250",
  "references": [
    {
      "url": "http://archives.neohapsis.com/archives/bugtraq/2014-06/0174.html",
      "source": "product-security@apple.com"
    },
    {
      "url": "http://www.securityfocus.com/bid/68276",
      "source": "product-security@apple.com"
    },
    {
      "url": "http://www.securitytracker.com/id/1030500",
      "source": "product-security@apple.com"
    },
    {
      "url": "http://archives.neohapsis.com/archives/bugtraq/2014-06/0174.html",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/68276",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securitytracker.com/id/1030500",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-264"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Settings in Apple iOS before 7.1.2 allows physically proximate attackers to bypass an intended iCloud password requirement, and turn off the Find My iPhone service, by leveraging incorrect state management."
    },
    {
      "lang": "es",
      "value": "Settings en Apple iOS anterior a 7.1.2 permite a atacantes físicamente próximos evadir un requisito de contraseña iCloud, y apagar el servicio Find My iPhone, mediante el aprovechamiento de la gestión del estado incorrecta."
    }
  ],
  "lastModified": "2026-06-17T00:04:44.757",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E8E92C81-A564-4B9A-A263-8C0CF7844D32",
              "versionEndIncluding": "7.1.1"
            },
            {
              "criteria": "cpe:2.3:o:apple:iphone_os:7.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "07A11433-B725-4BD6-B998-4B3637F061EC"
            },
            {
              "criteria": "cpe:2.3:o:apple:iphone_os:7.0.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4FD62141-07B1-4E3D-80BC-25D519F90DBD"
            },
            {
              "criteria": "cpe:2.3:o:apple:iphone_os:7.0.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D9737BD4-B4F4-4291-A1E9-B692ECBC657E"
            },
            {
              "criteria": "cpe:2.3:o:apple:iphone_os:7.0.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B6160869-944D-4E34-BB81-6A1259D692B1"
            },
            {
              "criteria": "cpe:2.3:o:apple:iphone_os:7.0.4:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "090CAC3C-4B20-46E5-A8C7-950B7E1DB5E9"
            },
            {
              "criteria": "cpe:2.3:o:apple:iphone_os:7.0.5:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E96F77DD-0962-4E55-97A2-9BC2FE01D8A8"
            },
            {
              "criteria": "cpe:2.3:o:apple:iphone_os:7.0.6:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "8BD9ACBF-34A4-4181-A6E0-78ABD4FC9ACB"
            },
            {
              "criteria": "cpe:2.3:o:apple:iphone_os:7.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "EDF40E86-E5D2-4D66-B296-ADFA78B42113"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "product-security@apple.com"
}