CVE-2008-4227: Apple iPhone OS

High severity, CVSS 7.5. EPSS: 1.6% chance of exploitation in the next 30 days.

Apple iPhone OS 1.0 through 2.1 and iPhone OS for iPod touch 1.1 through 2.1 changes the encryption level of PPTP VPN connections to a lower level than was previously used, which makes it easier for remote attackers to obtain sensitive information or hijack a connection by decrypting network traffic.

Affected products

• Apple iPhone OS: version 1.0 only; version 1.0.1 only; version 1.0.2 only; version 1.1 only; version 1.1.1 only; version 1.1.2 only; …

Published 2008-11-25. Last modified 2026-06-16.