VULNERABILITY INTELLIGENCE

CVE-2016-4685

CVSS score5.9 MEDIUM

EPSS probability0.58%

CISA KEVNot currently listed

Published2017-02-20

Last modified2026-06-17

CVSS vectorCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Description

An issue was discovered in certain Apple products. iOS before 10.1 is affected. The issue involves the "iTunes Backup" component, which improperly hashes passwords, making it easier to decrypt files.

Weakness classification

CWE-326: Inadequate Encryption Strength

Primary references

product-security@apple.com — Third Party Advisory, VDB Entry
product-security@apple.com — Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, VDB Entry
af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory