VULNERABILITY INTELLIGENCE

CVE-2010-1810

CVSS score3.5 LOW
EPSS probability0.60%
CISA KEVNot currently listed
Published2010-09-09
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:S/C:N/I:P/A:N

Description

FaceTime in Apple iOS before 4.1 on the iPhone and iPod touch does not properly handle invalid X.509 certificates, which allows man-in-the-middle attackers to redirect calls via a crafted certificate.

Primary references