Description
Apple iOS before 8.1.1 does not properly enforce the failed-passcode limit, which makes it easier for physically proximate attackers to bypass the lock-screen protection mechanism via a series of guesses.
References
- appleios-cve20144451-sec-bypass(98776) vdb-entry
- APPLE-SA-2014-11-17-1 vendor-advisory
- https://support.apple.com/en-us/HT6590
- 62504 third-party-advisory
- 71138 vdb-entry
- 1031232 vdb-entry
- https://support.apple.com/en-us/HT204418