Main Vulnerability Database Vulnerabilities #VU61347

#VU61347 Improper Authentication in Apple iOS and iPadOS - CVE-2022-22642

Published: March 14, 2022

Vulnerability identifier: #VU61347

Vulnerability risk: Low

CVSSv4.0: CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:U/U:Clear

CVE-ID: CVE-2022-22642

CWE-ID: CWE-287

Exploitation vector: Local access

Exploit availability: No public exploit available

Vulnerable software:
Apple iOS
iPadOS

Software vendor:
Apple Inc.

Description

The vulnerability allows an attacker to bypass authentication process.

The vulnerability exists due to an error in FaceTime. An attacker can bypass Emergency SOS passcode prompt.

Install updates from vendor's website.