Detections
Analytics
Apple iOS 7.x < 7.1.2 Multiple Vulnerabilities
high Nessus Network Monitor Plugin ID 8322
Synopsis
The remote mobile device is running an outdated version of Apple iOS that is missing multiple security updates.Description
According to its banner, the remote iOS device is missing a security update. Versions of Apple iOS 7.x prior to 7.1.2 are affected by vulnerabilities within the following components :- Certificate Trust Policy
- CoreGraphics
- Kernel
- launchd
- Lock Screen
- Lockdown
- Safari
- Secure Transport
- Settings
- Siri
- WebKit
Solution
Upgrade to iOS version 7.1.2 or later.See Also
http://seclists.org/bugtraq/2014/Jun/173
http://support.apple.com/kb/HT6297
http://packetstormsecurity.com/files/127307/Apple-Security-Advisory-2014-06-30-3.html
Plugin Details
Severity: High
ID: 8322
Family: Mobile Devices
Published: 7/2/2014
Updated: 3/6/2019
Nessus ID: 76315
Risk Information
VPR
Risk Factor: Medium
Score: 5.9
CVSS v2
Risk Factor: High
Base Score: 7.5
Temporal Score: 6.5
Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P
CVSS v3
Risk Factor: High
Base Score: 7.3
Temporal Score: 7
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Temporal Vector: CVSS:3.0/E:X/RL:O/RC:C
Vulnerability Information
CPE: cpe:/o:apple:iphone_os
Patch Publication Date: 6/30/2014
Vulnerability Publication Date: 6/30/2014
Reference Information
CVE: CVE-2013-2875, CVE-2013-2927, CVE-2014-1323, CVE-2014-1325, CVE-2014-1326, CVE-2014-1327, CVE-2014-1329, CVE-2014-1330, CVE-2014-1331, CVE-2014-1333, CVE-2014-1334, CVE-2014-1335, CVE-2014-1336, CVE-2014-1337, CVE-2014-1338, CVE-2014-1339, CVE-2014-1341, CVE-2014-1342, CVE-2014-1343, CVE-2014-1345, CVE-2014-1348, CVE-2014-1349, CVE-2014-1350, CVE-2014-1351, CVE-2014-1352, CVE-2014-1353, CVE-2014-1354, CVE-2014-1355, CVE-2014-1356, CVE-2014-1357, CVE-2014-1358, CVE-2014-1359, CVE-2014-1360, CVE-2014-1361, CVE-2014-1362, CVE-2014-1363, CVE-2014-1364, CVE-2014-1365, CVE-2014-1366, CVE-2014-1367, CVE-2014-1368, CVE-2014-1382, CVE-2014-1731