Vulnerabilities > CVE-2021-1854 - Incorrect Authorization vulnerability in Apple Iphone OS

047910
CVSS 4.3 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
NONE
Integrity impact
LOW
Availability impact
NONE
network
low complexity
apple
CWE-863
NVD
Published: 2021-09-08
Updated: 2021-09-17

Summary

A call termination issue with was addressed with improved logic. This issue is fixed in iOS 14.5 and iPadOS 14.5. A legacy cellular network can automatically answer an incoming call when an ongoing call ends or drops. .

Vulnerable Configurations

Part Description Count
OS
Apple
246

Common Weakness Enumeration (CWE)

References