Description
The Passcode Lock implementation in Apple iOS before 6.1.3 does not properly manage the lock state, which allows physically proximate attackers to bypass an intended passcode requirement by leveraging an error in the emergency-call feature.
References (2)
Core 2
Core References
Vendor Advisory vendor-advisory
x_refsource_apple
http://lists.apple.com/archives/security-announce/2013/Mar/msg00004.html
Vendor Advisory x_refsource_confirm
http://support.apple.com/kb/HT5704
Scores
EPSS
0.0036
EPSS Percentile
29.0%
Details
CWE
CWE-264
Status
published
Products (30)
apple/iphone_os
1.0.0
apple/iphone_os
1.0.1
apple/iphone_os
1.0.2
apple/iphone_os
1.1.0 (2 CPE variants)
apple/iphone_os
1.1.1
apple/iphone_os
1.1.2 (2 CPE variants)
apple/iphone_os
1.1.3 (2 CPE variants)
apple/iphone_os
1.1.4 (2 CPE variants)
apple/iphone_os
1.1.5 (2 CPE variants)
apple/iphone_os
2.0
... and 20 more
Published
Mar 20, 2013
Tracked Since
Feb 18, 2026