iOS 17.2.1 Screen Time Passcode Bypass Vulnerabilities
by butitsbadguy - Monday November 11, 2024 at 06:28 AM
#1
A mitigation bypass / privilege escalation flaw has been discovered in Apple's iOS Screen Time functionality, granting one access to modify the restrictions. It allows a local attacker to acquire the Screen Time Passcode by bypassing the anti-bruteforce protections on the four-digit Passcode, and in consequence gaining total control over Screen Time (Parental Control) settings. Version 17.2.1 is affected.
Hidden Content
You must register or login to view this content.
Reply
#2
https://raidforums.im/Thread-Apple-iOS-1...-Retrieval
[Image: 13c57c66-da53-4318-a2b8-cd1ccb05817e]
Reply
#3
lets seee whats in here
Reply
#4
@Tanaka
@zjj
@Loki
Nigger copied my thread
https://raidforums.im/Thread-Apple-iOS-1...-Retrieval
[Image: 13c57c66-da53-4318-a2b8-cd1ccb05817e]
Reply
#5
(11-11-2024, 07:08 PM)miyako Wrote: @Tanaka
@zjj
@Loki
Nigger copied my thread
https://raidforums.im/Thread-Apple-iOS-1...-Retrieval

Funny seeing you get butthurt when you've copied the whole thing yourself, from https://seclists.org/fulldisclosure/2024/Sep/51
Reply
#6
thanks for posting!
Reply
#7
thank you for sharing
Ban reason: Leeching | http://raiddfzn73ir6iyxlf7nwytnujiflddog...an-Appeals if you feel this is incorrect. (Permanent)
Reply
#8
thank you for sharing
Ban reason: Leeching | http://raiddfzn73ir6iyxlf7nwytnujiflddog...an-Appeals if you feel this is incorrect. (Permanent)
Reply
#9
(11-12-2024, 04:23 AM)Loki Wrote:
(11-11-2024, 07:08 PM)miyako Wrote: @Tanaka
@zjj
@Loki
Nigger copied my thread
http://breachddyfwvcp4kzccos5oxtdbssmfbp...-Retrieval

Funny seeing you get butthurt when you've copied the whole thing yourself, from https://seclists.org/fulldisclosure/2024/Sep/51

Cooked him Confusedob:
Ban reason: Self-Ban | http://raiddfzn73ir6iyxlf7nwytnujiflddog...an-Appeals if you wish to be unbanned in the future. (Permanent)
Reply


Possibly Related Threads…
Thread Author Replies Views Last Post
  CVE-2024-5630 WordPress RCE via zip bypass upload HA_twck 59 6,160 Yesterday, 01:10 PM
Last Post: Shreker
  My Collection of Exploits/Vulnerabilities Search Engines 192 66 2,723 Yesterday, 01:01 PM
Last Post: Shreker
  !Next.js Middleware Bypass (CVE-2025-29927) Rat1337 22 1,421 09-17-2026, 03:49 AM
Last Post: kilkiller
  Google Dorks for finding SQL injection vulnerabilities and other security issues 1yush 71 3,455 09-15-2026, 02:29 AM
Last Post: Snyergy
  CVE-2025-40554 - SolarWinds Web Help Desk Auth Bypass & RCE PoC miyako 3 246 02-07-2026, 03:32 PM
Last Post: cysc



 Users browsing this thread: 1 Guest(s)