CVE-2010-1756 Information disclosure in n/a

Medium 5.8 Published Updated

The iOS Settings app fails to accurately report the active wireless network, potentially allowing attackers to trick users into connecting to malicious networks.

Exploited in the wild
Not known
Login needed
Not needed
Attackable
Over the internet
Victim action needed
A user has to click or open something
Fix
None listed

What is CVE-2010-1756?

CVE-2010-1756 is a medium-severity vulnerability in Apple Iphone Os, published on 22 Jun 2010. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.

Official description

The Settings application in Apple iOS before 4 on the iPhone and iPod touch does not properly report the wireless network that is in use, which might make it easier for remote attackers to trick users into communicating over an unintended network.

Which versions are affected by CVE-2010-1756?

It affects 1 product.

Products include Apple Iphone Os.

How do I fix CVE-2010-1756?

No fix has been published for CVE-2010-1756 yet. Limit exposure of the affected software until one is available.

Is CVE-2010-1756 being exploited?

There is no known exploitation of CVE-2010-1756 in the wild and no public exploit code.

All Apple Iphone Os vulnerabilities

Sources

Also known as GHSA-hc66-qvwm-w7h2.

Is CVE-2010-1756 in your software?

Upload an SBOM and sbomify checks it against every vulnerability here, every day.

Check your SBOMs for free