PT-2025-20765 · Apple · Ipados+1

崔宝江 + 2 · Published 2025-05-12 · Updated 2025-09-25 · CVE-2025-31214

Positive Technologies (AI Summary)

CVSS v3.1

8.1

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

Name of the Vulnerable Software and Affected Versions iOS versions prior to 18.5 iPadOS versions prior to 18.5

Description The issue allows an attacker in a privileged network position to intercept network traffic. This was addressed through improved state management.

Recommendations For iOS versions prior to 18.5, update to iOS 18.5 to resolve the issue. For iPadOS versions prior to 18.5, update to iPadOS 18.5 to resolve the issue.

Fix

Cleartext Transmission of Sensitive Information

Weakness Enumeration

CWE-319

CWE-300

Related Identifiers

BDU:2025-05550

CVE-2025-31214

Affected Products

Ios

Ipados

References · 13

• https://osv.dev/vulnerability/CVE-2025-31214 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-31214 · Security Note
• https://support.apple.com/en-us/122404 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-05550 · Security Note
• https://twitter.com/Moin_nagani/status/1971218976404537760 · Twitter Post
• https://t.me/cvenotify/122333 · Telegram Post
• https://twitter.com/CVEnew/status/1922046732013043960 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1922170371060457784 · Twitter Post
• https://t.me/true_secator/7025 · Telegram Post
• https://cybersecurity-help.cz/vdb/SB2025051303 · Note
• http://seclists.org/fulldisclosure/2025/May/5 · Note
• https://twitter.com/indigo79x/status/1950999258431365461 · Twitter Post
• https://twitter.com/syedaquib77/status/1922688755963658667 · Twitter Post