CVE-2017-7088

5.9 mediumEPSS 1.9%

Medium (5.9) in apple iphone os. EPSS 1.9% chance of exploitation in the next 30 days.

An issue was discovered in certain Apple products. iOS before 11 is affected. The issue involves the "Exchange ActiveSync" component. It allows remote attackers to erase a device in opportunistic circumstances by hijacking a cleartext AutoDiscover V1 session during the setup of an Exchange account.

Severity

CVSS 3.0

5.9 medium

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS: 1.9% chance of exploitation in the next 30 days; higher than 79% of CVEs (scores of 2026-10-31)
CWE: CWE-275
Published: 2017-10-23
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

apple:iphone_os

References

http://www.securityfocus.com/bid/100892
http://www.securitytracker.com/id/1039385
https://support.apple.com/HT208112
http://www.securityfocus.com/bid/100892
http://www.securitytracker.com/id/1039385

Check your stack JSON