CVE-2010-1776

MEDIUM

Apple Iphone OS - Security Feature Bypass

Title source: rule

Description

Find My iPhone on iOS 2.0 through 3.1.3 for iPhone 3G and later and iOS 2.1 through 3.1.3 for iPod touch (2nd generation) and later, when Find My iPhone is disabled, allows remote authenticated users with an associated MobileMe account to wipe the device.

References (1)

[Vendor Advisory] https://support.apple.com/en-us/HT4225

Scores

CVSS v3 4.8

EPSS 0.0036

EPSS Percentile 58.0%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H

Classification

CWE

CWE-254

Status published

Affected Products (10)

apple/iphone_os

n/a/n/a

Timeline

Published Apr 24, 2017

Tracked Since Feb 18, 2026