5.9
CVSSv3

CVE-2017-7088

Published: 23/10/2017 Updated: 26/10/2017
CVSS v2 Base Score: 7.1 | Impact Score: 6.9 | Exploitability Score: 8.6
CVSS v3 Base Score: 5.9 | Impact Score: 3.6 | Exploitability Score: 2.2
VMScore: 632
Vector: AV:N/AC:M/Au:N/C:N/I:N/A:C

Vulnerability Summary

An issue exists in certain Apple products. iOS prior to 11 is affected. The issue involves the "Exchange ActiveSync" component. It allows remote malicious users to erase a device in opportunistic circumstances by hijacking a cleartext AutoDiscover V1 session during the setup of an Exchange account.

Vulnerable Product Search on Vulmon Subscribe to Product

apple iphone os