CVE-2014-1351
Severity CVSS v4.0:
Pending analysis
Type:
CWE-264
Permissions, Privileges, and Access Control
Publication date:
01/07/2014
Last modified:
07/01/2017
Description
Siri in Apple iOS before 7.1.2 allows physically proximate attackers to bypass an intended lock-screen passcode requirement, and read a contact list, via a Siri request that refers to a contact ambiguously.
Impact
Base Score 2.0
3.60
Severity 2.0
LOW
Vulnerable products and versions
CPE | From | Up to |
---|---|---|
cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:* | 7.1.1 (including) | |
cpe:2.3:o:apple:iphone_os:7.0:*:*:*:*:*:*:* | ||
cpe:2.3:o:apple:iphone_os:7.0.1:*:*:*:*:*:*:* | ||
cpe:2.3:o:apple:iphone_os:7.0.2:*:*:*:*:*:*:* | ||
cpe:2.3:o:apple:iphone_os:7.0.3:*:*:*:*:*:*:* | ||
cpe:2.3:o:apple:iphone_os:7.0.4:*:*:*:*:*:*:* | ||
cpe:2.3:o:apple:iphone_os:7.0.5:*:*:*:*:*:*:* | ||
cpe:2.3:o:apple:iphone_os:7.0.6:*:*:*:*:*:*:* | ||
cpe:2.3:o:apple:iphone_os:7.1:*:*:*:*:*:*:* |
To consult the complete list of CPE names with products and versions, see this page