CVE-2014-4364
18.09.2014, 10:55
The 802.1X subsystem in Apple iOS before 8 and Apple TV before 7 does not require strong authentication methods, which allows remote attackers to calculate credentials by offering LEAP authentication from a crafted Wi-Fi AP and then performing a cryptographic attack against the MS-CHAPv1 hash.Enginsight
| Vendor | Product | Version |
|---|---|---|
| apple | iphone_os | 𝑥 ≤ 7.1.2 |
| apple | iphone_os | 7.0 |
| apple | iphone_os | 7.0.1 |
| apple | iphone_os | 7.0.2 |
| apple | iphone_os | 7.0.3 |
| apple | iphone_os | 7.0.4 |
| apple | iphone_os | 7.0.5 |
| apple | iphone_os | 7.0.6 |
| apple | iphone_os | 7.1 |
| apple | iphone_os | 7.1.1 |
| apple | tvos | 𝑥 ≤ 6.2 |
| apple | tvos | 6.0 |
| apple | tvos | 6.0.1 |
| apple | tvos | 6.0.2 |
| apple | tvos | 6.1 |
| apple | tvos | 6.1.1 |
| apple | tvos | 6.1.2 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References