CVE-2013-1028

no score yetEPSS 0.8%

The IPSec implementation in Apple Mac OS X before 10.8.5, when Hybrid Auth is used, does not verify X.509 certificates from security gateways, which allows man-in-the-middle attackers to spoof security gateways and obtain sensitive information via a crafted certificate.

EPSS: 0.8% chance of exploitation in the next 30 days; higher than 56% of CVEs (scores of 2026-10-31)
CWE: CWE-20
Published: 2013-09-16
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

apple:iphone_os
apple:mac_os_x

References

http://lists.apple.com/archives/security-announce/2013/Sep/msg00002.html
http://lists.apple.com/archives/security-announce/2013/Sep/msg00006.html
http://secunia.com/advisories/54886
http://support.apple.com/kb/HT5880
http://support.apple.com/kb/HT5934

Check your stack JSON