NetSight
IP …
medium4.6

CVE-2014-1350

Settings in Apple iOS before 7.1.2 allows physically proximate attackers to bypass an intended iCloud password requirement, and turn off the Find My iPhone ser…

Impact

Settings in Apple iOS before 7.1.2 allows physically proximate attackers to bypass an intended iCloud password requirement, and turn off the Find My iPhone service, by leveraging incorrect state management.

Affected products

VendorProductAffected versions
AppleIphone Os
through 7.1.1
Versions 7.0, 7.0.1, 7.0.2, 7.0.3, 7.0.4

Weakness classification

CWE-264

References