CVE-2014-1267
Apple iOS < 7.1 and Apple TV < 6.1 - Unauthenticated Access Restriction Bypass via Expired Configuration Profile
Title source: llmDescription
The Configuration Profiles component in Apple iOS before 7.1 and Apple TV before 6.1 does not properly evaluate the expiration date of a mobile configuration profile, which allows attackers to bypass intended access restrictions by using a profile after the date has passed.
References (2)
Core 2
Core References
Vendor Advisory x_refsource_confirm
http://support.apple.com/kb/HT6163
Vendor Advisory x_refsource_confirm
http://support.apple.com/kb/HT6162
Scores
EPSS
0.0112
EPSS Percentile
62.3%
Details
CWE
CWE-20
Status
published
Products (10)
apple/iphone_os
7.0
apple/iphone_os
7.0.1
apple/iphone_os
7.0.2
apple/iphone_os
7.0.3
apple/iphone_os
7.0.4
apple/iphone_os
7.0.5
apple/iphone_os
< 7.0.6
apple/tvos
6.0
apple/tvos
6.0.1
apple/tvos
< 6.0.2
Published
Mar 14, 2014
Tracked Since
Feb 18, 2026