PT-2016-6105 · Apple · Ios

Raul Siles · Published 2016-09-18 · Updated 2017-08-13 · CVE-2016-4741

Positive Technologies (AI Summary)

CVSS v3.1

5.9

Medium

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 10

Description The issue allows man-in-the-middle attackers to block software updates due to the lack of an HTTPS session for retrieving updates.

Recommendations For Apple iOS versions prior to 10, update to version 10 or later to resolve the issue.

Fix

Weakness Enumeration

CWE-254

Related Identifiers

CVE-2016-4741

Affected Products

Ios

References · 7

• http://lists.apple.com/archives/security-announce/2016/Sep/msg00008.html · Vendor Advisory
• http://lists.apple.com/archives/security-announce/2016/Sep/msg00002.html · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2016-4741 · Vendor Advisory
• https://support.apple.com/HT207143 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2016-4741 · Security Note
• http://securitytracker.com/id/1036797 · Note
• http://securityfocus.com/bid/92932 · Note