Vulnetix
Try Vulnetix Request Demo
CVE-2017-7088 PUBLISHED CVSS 5.900000095367432 MEDIUM

An issue was discovered in certain Apple products. iOS before 11 is affected. The issue involves the "Exchange ActiveSync" component. It allows remote attackers to erase a device in opportunistic circumstances by hijacking a cleartext AutoDiscover V1 session during the setup of an Exchange account.

EPSS 1.58% · 81.4th percentile

Risk Scores

CVSS v3.0
5.900000095367432
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS Score
1.58%
81.4th percentile

Affected Products

VendorProductVersions
n/an/an/a
appleiphone_os0

Timeline

References

Open in Interactive Console →