Apple IPAD2 vulnerabilities

2 CVEs affecting Apple IPAD2, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2013-3955, published 2013-06-05.

More from Apple.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2013-3955, published 2013-06-05. Medium severity, CVSS 6.2. EPSS: 0.4% chance of exploitation in the next 30 days. The get_xattrinfo function in the XNU kernel in Apple iOS 5.x and 6.x through 6.1.3 on iPad devices does not properly validate the header of an AppleDouble file, which might allow local users to…
• CVE-2011-3440, published 2011-11-11. Low severity, CVSS 1.2. EPSS: 0.3% chance of exploitation in the next 30 days. The Passcode Lock feature in Apple iOS before 5.0.1 on the iPad 2 does not properly implement the locked state, which allows physically proximate attackers to access data by opening a Smart Cover…