Apple iOS 7.x < 7.0.3 Multiple Vulnerabilities
PVS ID: 8057 FAMILY: Mobile Devices RISK: LOW NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is running a version of iOS that is missing security updates.\n\nThe remote host is an iPhone, iPod Touch, or iPad running a version of iOS that is older than version 7.0.3, which means it may be missing updates for the following vulnerabilities:\n\n - A null dereferencing at the lock screen could allow someone to bypass the lock to make calls to any phone number. (CVE-2013-5144)\n\n - Passcode entry may be visible when it should not be, and this may allow an attacker with physical access to brute force the passcode. (CVE-2013-5162)\n\n - A race condition may inadvertently allow access to the Contacts pane while the phone is locked. (CVE-2013-5164)\n\nFor your information, the observed version of iOS is %L.

Solution: Upgrade to iOS 7.0.3 or later.


Copyright Tenable Network Security Inc. 2013