Apple iOS < 8.1 Multiple Vulnerabilities (POODLE)

medium Nessus Plugin ID 78585

Language:

Synopsis

The version of iOS running on the mobile device is affected by multiple vulnerabilities.

Description

The mobile device is running a version of iOS prior to version 8.1. It is, therefore, affected by vulnerabilities in the following components :

- Bluetooth
- House Arrest
- iCloud Data Access
- Keyboards
- Secure Transport

Solution

Upgrade to Apple iOS version 8.1 or later.

Plugin Details

Severity: Medium

ID: 78585

File Name: apple_ios_81_check.nbin

Version: 1.105

Type: local

Family: Mobile Devices

Published: 10/20/2014

Updated: 9/4/2024

Supported Sensors: Nessus

Risk Information

VPR

Risk Factor: Medium

Score: 5.9

CVSS v2

Risk Factor: Medium

Base Score: 6.8

Temporal Score: 5

Vector: CVSS2#AV:N/AC:M/Au:N/C:P/I:P/A:P

CVSS Score Source: CVE-2014-4449

Vulnerability Information

CPE: cpe:/o:apple:iphone_os

Required KB Items: mdm/dependency/unlocked

Exploit Available: true

Exploit Ease: Exploits are available

Patch Publication Date: 10/20/2014

Vulnerability Publication Date: 10/14/2014

Exploitable With

Metasploit (HTTP SSL/TLS Version Detection (POODLE scanner))

Reference Information

CVE: CVE-2014-3566, CVE-2014-4428, CVE-2014-4448, CVE-2014-4449, CVE-2014-4450

BID: 70574, 70636, 70659, 70660, 70661

APPLE-SA: APPLE-SA-2014-10-20-1

CERT: 577193

Detections

Analytics