VulnerabilityModified
CVE-2010-1810
FaceTime in Apple iOS before 4.1 on the iPhone and iPod touch does not properly handle invalid X.509 certificates, which allows man-in-the-middle attackers to redirect calls via a crafted certificate.
LOW 3.5EPSS 0.60%
Does this matter?
Lower severity and a low EPSS score (0.60%). Track it; it rarely justifies an emergency change on its own.
Description
FaceTime in Apple iOS before 4.1 on the iPhone and iPod touch does not properly handle invalid X.509 certificates, which allows man-in-the-middle attackers to redirect calls via a crafted certificate.
- CVSS 2.0
- 3.5 LOWAV:N/AC:M/Au:S/C:N/I:P/A:N
- EPSS
- 0.60% probability · 47th percentile
- CISA KEV
- Not listed
- Affected
- apple/iphone os
- Source
- product-security@apple.com
References
- http://lists.apple.com/archives/security-announce/2010//Sep/msg00002.htmlVendor Advisory
- http://support.apple.com/kb/HT4334Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/61695
- http://lists.apple.com/archives/security-announce/2010//Sep/msg00002.htmlVendor Advisory
- http://support.apple.com/kb/HT4334Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/61695
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.