CVE-2022-22642

This issue was addressed with improved checks

published March 18, 2022

CVSS
—
EPSS
1%
Percentile
67.1
In the wild
Unconfirmed
What it is

⚠️ A sneaky bypass could let users dodge the Emergency SOS passcode prompt! 🔒 Think of it like a fire alarm that opens the exit door without checking for the correct code — a backdoor escape route in an emergency situation, which could lead to serious consequences if someone gets in who shouldn’t. If exploited, someone could potentially access sensitive features that are meant to be locked away during an emergency, leading to unauthorized actions or breaches of security. While this vulnerability is not currently known to be exploited, the implications could be concerning for user privacy and safety.

Put simply

Think of it like a fire alarm that opens the exit door without checking for the correct code — a backdoor escape route in an emergency situation, which could lead to serious consequences if someone gets in who shouldn’t. This vulnerability allows a user to bypass the Emergency SOS passcode prompt due to insufficient checks during the SOS process, which could lead to unauthorized access to certain functionalities.

What to do

If exploited, someone could potentially access sensitive features that are meant to be locked away during an emergency, leading to unauthorized actions or breaches of security. While this vulnerability is not currently known to be exploited, the implications could be concerning for user privacy and safety. To stay safe, make sure to update your device to iOS 15.4 or iPadOS 15.4 immediately. Regularly check for software updates to ensure you have the latest security patches. You've got this! Stay vigilant and keep your devices updated for maximum security! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01170 · 67.1th percentile
Published
2022-03-18T17:59Z
EPSS history
Timeline
  • 18 MAR 17:59Z
    This issue was addressed with improved checks
    cvelistv5