CVE-2017-2411

5.9 mediumEPSS 0.7%

Medium (5.9) in apple iphone os. EPSS 0.7% chance of exploitation in the next 30 days.

In iOS before 11.2, exchange rates were retrieved from HTTP rather than HTTPS. This was addressed by enabling HTTPS for exchange rates.

Severity

5.9 medium

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS: 0.7% chance of exploitation in the next 30 days; higher than 54% of CVEs (scores of 2026-10-31)
CWE: CWE-254
Published: 2019-01-11
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19