CVE-2011-3434: Medium severity iphone os vulnerability
Published Oct 14, 2011
·Updated
The WiFi component in Apple iOS before 5 stores WiFi credentials in an unspecified file, which makes it easier for remote attackers to obtain sensitive information via a crafted application.
Affected Software
29 affected components
apple iPhone OS=4.0
apple iPhone OS=4.3.2
apple iPhone OS=4.0.2
apple iPhone OS=4.0.1
apple iPhone OS=3.2
apple iPhone OS=4.2.8
apple iPhone OS=4.1
apple iPhone OS=3.1.2
apple iPhone OS=4.3.5
apple iPhone OS=3.1.3
apple iPhone OS=4.3.1
apple iPhone OS=4.2.5
apple iPhone OS=3.2.1
apple iPhone OS=3.1
apple iPhone OS=4.3.5
apple iPhone OS=3.1
apple iPhone OS=3.2
apple iPhone OS=4.3.5
apple iPhone OS=4.2.1
apple iPhone OS=3.0
apple iPhone OS=4.0.1
apple iPhone OS=4.3.3
apple iPhone OS=4.0.1
apple iPhone OS=4.0
apple iPhone OS=3.1
apple iPhone OS=4.0
apple iPhone OS=4.3.0
apple iPhone OS=3.2.1
apple iPhone OS=3.2.2
Event History
Oct 14, 2011
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2011-3434?
CVE-2011-3434 is classified as a medium severity vulnerability.
2
How do I fix CVE-2011-3434?
To mitigate CVE-2011-3434, users should upgrade to iOS version 5 or later.
3
What type of information is at risk due to CVE-2011-3434?
CVE-2011-3434 could allow attackers to access sensitive WiFi credentials stored on vulnerable devices.
4
What versions of iOS are affected by CVE-2011-3434?
CVE-2011-3434 affects various versions of iOS up to 4.3.5.
5
Can CVE-2011-3434 be exploited remotely?
Yes, CVE-2011-3434 can be exploited remotely via a crafted application.