CVE-2010-1776: Medium severity iphone os vulnerability

Published Apr 24, 2017

Updated

Find My iPhone on iOS 2.0 through 3.1.3 for iPhone 3G and later and iOS 2.1 through 3.1.3 for iPod touch (2nd generation) and later, when Find My iPhone is disabled, allows remote authenticated users with an associated MobileMe account to wipe the device.

Affected Software

9 affected components

apple iPhone OS=3.0

apple iPhone OS=3.1.3

apple iPhone OS=2.2

apple iPhone OS=3.1.2

apple iPhone OS=3.0.1

apple iPhone OS=3.1

apple iPhone OS=2.1

apple iPhone OS=2.1.1

apple iPhone OS=2.2.1

Event History

Apr 24, 2017

CVE Published

via MITRE·07:00 PM

Data Sourced

via MITRE·07:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2010-1776?

CVE-2010-1776 is considered a high-risk vulnerability due to the potential for unauthorized device wiping.

How do I fix CVE-2010-1776?

To mitigate CVE-2010-1776, ensure that Find My iPhone is enabled on your device.

Which devices are affected by CVE-2010-1776?

CVE-2010-1776 affects the iPhone 3G and later, and the iPod touch (2nd generation) and later, running iOS versions 2.0 through 3.1.3.

What can an attacker do with CVE-2010-1776?

An attacker with an associated MobileMe account can remotely wipe the affected device if Find My iPhone is disabled.

Is there a patch available for CVE-2010-1776?

There is no specific patch for CVE-2010-1776, but upgrading to the latest supported version of iOS will help in mitigating the vulnerability.