CVE-2017-2352: Medium severity Apple iOS vulnerability
Unlock with iPhone. A logic issue was addressed through improved state management.
Other sources
An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. watchOS before 3.1.3 is affected. The issue involves the "Unlock with iPhone" component, which allows attackers to bypass the wrist-presence protection mechanism and unlock a Watch device via unspecified vectors.
Credit
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Apple iOS and iPadOSto a version that resolves this vulnerability.Fixed in 10.2.1
Event History
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
What is the severity of CVE-2017-2352?
CVE-2017-2352 is classified as a high-severity vulnerability affecting iOS and watchOS.
How do I fix CVE-2017-2352?
To fix CVE-2017-2352, update affected devices to iOS version 10.2.1 or later, and watchOS version 3.1.3 or later.
What products are affected by CVE-2017-2352?
CVE-2017-2352 affects iOS versions prior to 10.2.1 and watchOS versions prior to 3.1.3.
What type of vulnerability is CVE-2017-2352?
CVE-2017-2352 is a logic issue that allows attackers to bypass security measures on affected devices.
Can I continue using my device if it is affected by CVE-2017-2352?
It is recommended to update your device as continued use may expose it to security risks related to CVE-2017-2352.