CVE-2018-4172: Medium severity apple ios and ipados vulnerability
Find My iPhone. A state management issue existed when restoring from a back up. This issue was addressed through improved state checking during restore.
Other sources
An issue was discovered in certain Apple products. iOS before 11.3 is affected. The issue involves the "Find My iPhone" component. It allows physically proximate attackers to bypass the iCloud password requirement for disabling the "Find My iPhone" feature via vectors involving a backup restore.
Credit
Affected Software
Event History
Peer vulnerabilities
Found alongside the following vulnerabilities.
- CVE-2018-4177
- CVE-2018-4123
- CVE-2018-4155
- CVE-2018-4158
- CVE-2018-4142
- CVE-2018-4390
- CVE-2018-4391
- CVE-2018-4167
- CVE-2018-4168
- CVE-2018-4172
- CVE-2018-4151
- CVE-2018-4150
- CVE-2018-4104
- CVE-2018-4143
- CVE-2018-4185
- CVE-2017-15412
- CVE-2018-4187
- CVE-2018-4174
- CVE-2018-4166
- CVE-2018-4156
- CVE-2018-4157
- CVE-2018-4134
- CVE-2018-4137
- CVE-2018-4149
- CVE-2018-4144
- CVE-2018-4173
- CVE-2018-4154
- CVE-2018-4115
- CVE-2018-4140
- CVE-2018-4148
- CVE-2018-4110
- CVE-2018-4101
- CVE-2018-4114
- CVE-2018-4118
- CVE-2018-4119
- CVE-2018-4120
- CVE-2018-4121
- CVE-2018-4122
- CVE-2018-4125
- CVE-2018-4127
- CVE-2018-4128
- CVE-2018-4129
- CVE-2018-4130
- CVE-2018-4161
- CVE-2018-4162
- CVE-2018-4163
- CVE-2018-4165
- CVE-2018-4113
- CVE-2018-4146
- CVE-2018-4117
- CVE-2018-4207
- CVE-2018-4208
- CVE-2018-4209
- CVE-2018-4210
- CVE-2018-4212
- CVE-2018-4213
- CVE-2018-4145
- CVE-2018-4131
Frequently Asked Questions
What is CVE-2018-4172?
CVE-2018-4172 is a vulnerability that affects certain Apple products running iOS before 11.3. It involves the "Find My iPhone" component, allowing attackers to bypass the iCloud password requirement for disabling the feature.
How does CVE-2018-4172 impact Apple devices?
CVE-2018-4172 allows physically proximate attackers to bypass the iCloud password requirement for disabling the "Find My iPhone" feature on affected Apple devices.
What is the severity of CVE-2018-4172?
The severity of CVE-2018-4172 is medium, with a CVSS severity score of 4.6.
Which versions of iOS are affected by CVE-2018-4172?
iOS versions before 11.3 are affected by CVE-2018-4172.
Is there a fix for CVE-2018-4172?
Yes, updating to iOS version 11.3 or later will address the vulnerability.