CVE-2018-4436

EUVD-2018-16222
A certificate validation issue existed in configuration profiles. This was addressed with additional checks. This issue affected versions prior to iOS 12.1.1, tvOS 12.1.1, watchOS 5.1.2.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.5 HIGH
NETWORK
LOW
NONE
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 31%
Affected Products (NVD)
VendorProductVersion
appleiphone_os
𝑥
< 12.1.1
appletvos
𝑥
< 12.1.1
applewatchos
𝑥
< 5.1.2
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://support.apple.com/kb/HT209340
https://support.apple.com/kb/HT209342
https://support.apple.com/kb/HT209343
https://support.apple.com/kb/HT209340
https://support.apple.com/kb/HT209342
https://support.apple.com/kb/HT209343