CVE-2010-1776

MEDIUM

iPhone OS 2.0-3.1.3 - Authenticated Remote Device Wipe via Find My iPhone

Title source: llm
STIX 2.1

Description

Find My iPhone on iOS 2.0 through 3.1.3 for iPhone 3G and later and iOS 2.1 through 3.1.3 for iPod touch (2nd generation) and later, when Find My iPhone is disabled, allows remote authenticated users with an associated MobileMe account to wipe the device.

References (1)

Core 1
Core References
Vendor Advisory x_refsource_confirm
https://support.apple.com/en-us/HT4225

Scores

CVSS v3 4.8
EPSS 0.0095
EPSS Percentile 57.5%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H

Details

CWE
CWE-254
Status published
Products (9)
apple/iphone_os 2.1
apple/iphone_os 2.1.1
apple/iphone_os 2.2
apple/iphone_os 2.2.1
apple/iphone_os 3.0
apple/iphone_os 3.0.1
apple/iphone_os 3.1
apple/iphone_os 3.1.2
apple/iphone_os 3.1.3
Published Apr 24, 2017
Tracked Since Feb 18, 2026