VulnerabilityModified
CVE-2012-3750
The Passcode Lock implementation in Apple iOS before 6.0.1 does not properly manage the lock state, which allows physically proximate attackers to bypass an intended passcode requirement and access Passbook passes via unspecified vectors.
LOW 3.6EPSS 0.37%
Does this matter?
Lower severity and a low EPSS score (0.37%). Track it; it rarely justifies an emergency change on its own.
Description
The Passcode Lock implementation in Apple iOS before 6.0.1 does not properly manage the lock state, which allows physically proximate attackers to bypass an intended passcode requirement and access Passbook passes via unspecified vectors.
- CVSS 2.0
- 3.6 LOWAV:L/AC:L/Au:N/C:P/I:P/A:N
- EPSS
- 0.37% probability · 31th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-264
- Affected
- apple/iphone os
- Source
- product-security@apple.com
References
- http://archives.neohapsis.com/archives/bugtraq/2012-11/0012.html
- http://lists.apple.com/archives/security-announce/2012/Nov/msg00000.htmlVendor Advisory
- http://support.apple.com/kb/HT5567Vendor Advisory
- http://www.securityfocus.com/bid/56363
- https://exchange.xforce.ibmcloud.com/vulnerabilities/79747
- http://archives.neohapsis.com/archives/bugtraq/2012-11/0012.html
- http://lists.apple.com/archives/security-announce/2012/Nov/msg00000.htmlVendor Advisory
- http://support.apple.com/kb/HT5567Vendor Advisory
- http://www.securityfocus.com/bid/56363
- https://exchange.xforce.ibmcloud.com/vulnerabilities/79747
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.