VulnerabilityModified
CVE-2008-4593
Apple iPhone 2.1 with firmware 5F136, when Require Passcode is enabled and Show SMS Preview is disabled, allows physically proximate attackers to obtain sensitive information by performing an Emergency Call tap and then reading SMS messages on the…
LOW 1.2EPSS 0.32%
Does this matter?
Lower severity and a low EPSS score (0.32%). Track it; it rarely justifies an emergency change on its own.
Description
Apple iPhone 2.1 with firmware 5F136, when Require Passcode is enabled and Show SMS Preview is disabled, allows physically proximate attackers to obtain sensitive information by performing an Emergency Call tap and then reading SMS messages on the device screen, aka Apple bug number 6267416.
- CVSS 2.0
- 1.2 LOWAV:L/AC:H/Au:N/C:P/I:N/A:N
- EPSS
- 0.32% probability · 25th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-200
- Affected
- apple/iphone
- Source
- cve@mitre.org
References
- http://securitytracker.com/id?1021021
- http://www.karlkraft.com/index.php/2008/10/03/yet-another-iphone-emergency-call-security-bug/
- https://exchange.xforce.ibmcloud.com/vulnerabilities/46062
- http://securitytracker.com/id?1021021
- http://www.karlkraft.com/index.php/2008/10/03/yet-another-iphone-emergency-call-security-bug/
- https://exchange.xforce.ibmcloud.com/vulnerabilities/46062
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.