VULNERABILITY INTELLIGENCE

CVE-2017-2399

CVSS score4.6 MEDIUM
EPSS probability0.14%
CISA KEVNot currently listed
Published2017-04-02
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Description

An issue was discovered in certain Apple products. iOS before 10.3 is affected. The issue involves the "Pasteboard" component. It allows physically proximate attackers to read the pasteboard by leveraging the use of an encryption key derived only from the hardware UID (rather than that UID in addition to the user passcode).

Weakness classification

  • CWE-326: Inadequate Encryption Strength

Primary references