CVE-2021-1854

MEDIUM

iPadOS < 14.5 - Unauthenticated Call Termination Bypass

Title source: llm

Description

A call termination issue with was addressed with improved logic. This issue is fixed in iOS 14.5 and iPadOS 14.5. A legacy cellular network can automatically answer an incoming call when an ongoing call ends or drops. .

References (1)

Core 1

Core References

Vendor Advisory x_refsource_misc

https://support.apple.com/en-us/HT212317

Scores

CVSS v3 4.3

EPSS 0.0072

EPSS Percentile 49.0%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Details

CWE

CWE-863

Status published

Products (2)

apple/ipados < 14.5

apple/iphone_os < 14.5

Published Sep 08, 2021

Tracked Since Feb 18, 2026