CVE-2010-1776

Find My iPhone on iOS 2.0 through 3.1.3 for iPhone 3G and later and iOS 2.1 through 3.1.3 for iPod touch (2nd generation) and later, when Find My iPhone is disabled, allows remote authenticated users with an associated MobileMe account to wipe the device.

CVSS v3 4.8 MEDIUM
CVSS v2.0 4.9 MEDIUM

4.8^/10

CVSS v3 : MEDIUM

Vector : AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H

Exploitability : 1.2 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity HIGH

Privileges Required LOW

User Interaction REQUIRED

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

4.9^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:H/Au:S/C:N/I:N/A:C

Exploitability : 3.9 / Impact : 6.9

Access Vector NETWORK

Access Complexity HIGH

Authentication SINGLE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact COMPLETE

References

Link	Resource
https://support.apple.com/en-us/HT4225	Vendor Advisory
https://support.apple.com/en-us/HT4225	Vendor Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:o:apple:iphone_os:2.1:::::::*
	cpe:2.3:o:apple:iphone_os:2.1.1:::::::*
	cpe:2.3:o:apple:iphone_os:2.2:::::::*
	cpe:2.3:o:apple:iphone_os:2.2.1:::::::*
	cpe:2.3:o:apple:iphone_os:3.0:::::::*
	cpe:2.3:o:apple:iphone_os:3.0.1:::::::*
	cpe:2.3:o:apple:iphone_os:3.1:::::::*
	cpe:2.3:o:apple:iphone_os:3.1.2:::::::*
	cpe:2.3:o:apple:iphone_os:3.1.3:::::::*

History

21 Nov 2024, 01:15

Type	Values Removed	Values Added
References	~~() https://support.apple.com/en-us/HT4225 - Vendor Advisory~~	() https://support.apple.com/en-us/HT4225 - Vendor Advisory

Information

Published : 2017-04-24 19:59

Updated : 2024-11-21 01:15

NVD link : CVE-2010-1776

Mitre link : CVE-2010-1776

CVE.ORG link : CVE-2010-1776

JSON object : View

Products Affected

apple

iphone_os

CWE

CWE-254

7PK - Security Features

{"id": "CVE-2010-1776", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 4.9, "accessVector": "NETWORK", "vectorString": "AV:N/AC:H/Au:S/C:N/I:N/A:C", "authentication": "SINGLE", "integrityImpact": "NONE", "accessComplexity": "HIGH", "availabilityImpact": "COMPLETE", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 6.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 3.9, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV30": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.0", "baseScore": 4.8, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "REQUIRED", "attackComplexity": "HIGH", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 1.2}]}, "published": "2017-04-24T19:59:00.160", "references": [{"url": "https://support.apple.com/en-us/HT4225", "tags": ["Vendor Advisory"], "source": "product-security@apple.com"}, {"url": "https://support.apple.com/en-us/HT4225", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-254"}]}], "descriptions": [{"lang": "en", "value": "Find My iPhone on iOS 2.0 through 3.1.3 for iPhone 3G and later and iOS 2.1 through 3.1.3 for iPod touch (2nd generation) and later, when Find My iPhone is disabled, allows remote authenticated users with an associated MobileMe account to wipe the device."}, {"lang": "es", "value": "Find My iPhone en iOS 2.0 hasta la versi\u00f3n 3.1.3 para iPhone 3G y posteriores e iOS 2.1 hasta la versi\u00f3n 3.1.3 para iPod touch (segunda generaci\u00f3n) y posteriores, cuando Find My iPhone est\u00e1 deshabilitado, permite a usuarios remotos autenticados con una cuenta MobileMe asociada limpiar el dispositivo."}], "lastModified": "2024-11-21T01:15:10.650", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:apple:iphone_os:2.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "25A5D868-0016-44AB-80E6-E5DF91F15455"}, {"criteria": "cpe:2.3:o:apple:iphone_os:2.1.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4C14EEA4-6E35-4EBE-9A43-8F6D69318BA0"}, {"criteria": "cpe:2.3:o:apple:iphone_os:2.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B15E90AE-2E15-4BC2-B0B8-AFA2B1297B03"}, {"criteria": "cpe:2.3:o:apple:iphone_os:2.2.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4E0C0A8D-3DDD-437A-BB3D-50FAEAF6C440"}, {"criteria": "cpe:2.3:o:apple:iphone_os:3.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "863383DA-0BC6-4A96-835A-A96128EC0202"}, {"criteria": "cpe:2.3:o:apple:iphone_os:3.0.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2CFF5BE7-2BF6-48CE-B74B-B1A05383C10F"}, {"criteria": "cpe:2.3:o:apple:iphone_os:3.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "51D3BE2B-5A01-4AD4-A436-0056B50A535D"}, {"criteria": "cpe:2.3:o:apple:iphone_os:3.1.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9A20F171-79FE-43B9-8309-B18341639FA1"}, {"criteria": "cpe:2.3:o:apple:iphone_os:3.1.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "126EF22D-29BC-4366-97BC-B261311E6251"}], "operator": "OR"}]}], "sourceIdentifier": "product-security@apple.com"}