Main Vulnerability Database Vulnerabilities #VU61354

Improper Authentication in Apple iOS and iPadOS - CVE-2022-22618

Published: March 14, 2022

Vulnerability identifier: #VU61354

CSH Severity: Low

CVSS v4: 2.4 [CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N]

CVE-ID: CVE-2022-22618

CWE-ID: CWE-287

Exploitation vector: Local access

Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows an attacker to bypass authentication process.

The vulnerability exists due to an unspecified error. An attacker with physical access to device can bypass the Emergency SOS passcode prompt.

Apple iOS
iPadOS
watchOS

Install updates from vendor's website.

Apple iOS - update to 15.4 19E241
iPadOS - update to 15.4 19E241
watchOS - update to 8.5 19T242