CVE-2025-24200 - Vulnerability Details

- Authorization Flaw Allowing Disabling of USB Restricted Mode on Locked Devices

Description

An authorization issue was addressed with improved state management. This issue is fixed in iOS 15.8.4 and iPadOS 15.8.4, iOS 16.7.11 and iPadOS 16.7.11, iOS 18.3.1 and iPadOS 18.3.1, iPadOS 17.7.5. A physical attack may disable USB Restricted Mode on a locked device. Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals.

Published: 2025-02-10

Score: 6.1 Medium

EPSS: 47.3% Moderate

KEV: Yes

Impact:

Action:

Analysis

Impact

An authorization issue in Apple’s iOS and iPadOS systems was detected, where improper state management could allow an attacker to disable the USB Restricted Mode on a locked device. This flaw could enable the attacker to bypass hardware restrictions and potentially gain unauthorized access or elevate privileges on the affected device. The weakness is classified as CWE-863.

Affected Systems

The flaw affects multiple Apple operating systems, specifically iOS 15.8.4, 16.7.11, 18.3.1 and iPadOS 15.8.4, 16.7.11, 18.3.1, and iPadOS 17.7.5. Devices running any of these firmware versions are vulnerable until updated.

Risk and Exploitability

The CVSS score is 6.1, indicating a moderate severity, but the EPSS score of 47% signals a relatively high probability of exploitation. The vulnerability is listed in the CISA KEV catalog, underscoring that it has been targeted in at least one highly sophisticated attack. The attack vector is inferred to be physical, requiring an attacker to obtain access to the locked device to disable USB Restricted Mode, after which further exploitation may be possible.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions

Apple

iOS and iPadOS

affected

Version	Status	Constraints
`0`	affected	< 15.8.4
`0`	affected	< 16.7.11
`0`	affected	< 18.3.1

Apple

iPadOS

affected

Version	Status	Constraints
`0`	affected	< 17.7.5

Configuration 1 [-]

OR	cpe:2.3:o:apple:ipados::::::::
	cpe:2.3:o:apple:ipados::::::::
	cpe:2.3:o:apple:ipados::::::::
	cpe:2.3:o:apple:ipados::::::::
	cpe:2.3:o:apple:iphone_os::::::::
	cpe:2.3:o:apple:iphone_os::::::::
	cpe:2.3:o:apple:iphone_os::::::::

No data.

No data available yet.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

Upgrade the device to the latest supported iOS (15.8.4 or newer) or iPadOS (15.8.4 or newer) version that includes the fix.
Ensure that USB Restricted Mode remains enabled while the device is locked to prevent unauthorized physical access.
Limit physical access to the device and enforce good hygiene practices, such as using strong device passwords and enabling Find My iPhone.

Generated by OpenCVE AI on April 28, 2026 at 03:42 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

No CVSS v4.0

Attack Vector Physical

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact None

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is in the KEV database since Feb. 12, 2025.

The EPSS score is 0.47285.

Exploitation active

Automatable no

Technical Impact partial

References

Link	Providers
http://seclists.org/fulldisclosure/2025/Apr/7
http://seclists.org/fulldisclosure/2025/Feb/7
http://seclists.org/fulldisclosure/2025/Feb/8
https://support.apple.com/en-us/122173
https://support.apple.com/en-us/122174
https://support.apple.com/en-us/122345
https://support.apple.com/en-us/122346
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-24200

History

Tue, 28 Apr 2026 04:00:00 +0000

Type	Values Removed	Values Added
Title		Authorization Flaw Allowing Disabling of USB Restricted Mode on Locked Devices

Thu, 02 Apr 2026 20:30:00 +0000

Type	Values Removed	Values Added
Description	An authorization issue was addressed with improved state management. This issue is fixed in iPadOS 17.7.5, iOS 18.3.1 and iPadOS 18.3.1. A physical attack may disable USB Restricted Mode on a locked device. Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals.	An authorization issue was addressed with improved state management. This issue is fixed in iOS 15.8.4 and iPadOS 15.8.4, iOS 16.7.11 and iPadOS 16.7.11, iOS 18.3.1 and iPadOS 18.3.1, iPadOS 17.7.5. A physical attack may disable USB Restricted Mode on a locked device. Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals.
References		https://support.apple.com/en-us/122345 https://support.apple.com/en-us/122346

Mon, 03 Nov 2025 21:30:00 +0000

Type	Values Removed	Values Added
References		http://seclists.org/fulldisclosure/2025/Apr/7

Tue, 21 Oct 2025 23:15:00 +0000

Type	Values Removed	Values Added
References		https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-24200

Tue, 21 Oct 2025 20:30:00 +0000

Type	Values Removed	Values Added
References	https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-24200

Tue, 21 Oct 2025 19:30:00 +0000

Type	Values Removed	Values Added
References		https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-24200

Wed, 16 Jul 2025 13:45:00 +0000

Type	Values Removed	Values Added
Metrics	epss `{'score': 0.37248}`	epss `{'score': 0.37604}`

Tue, 18 Feb 2025 18:15:00 +0000

Type	Values Removed	Values Added
Metrics	cvssV3_1 `{'score': 4.6, 'vector': 'CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N'}`	cvssV3_1 `{'score': 6.1, 'vector': 'CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N'}`

Thu, 13 Feb 2025 16:45:00 +0000

Type	Values Removed	Values Added
First Time appeared		Apple Apple ipados Apple iphone Os
CPEs		cpe:2.3:o:apple:ipados:::::::: cpe:2.3:o:apple:iphone_os::::::::
Vendors & Products		Apple Apple ipados Apple iphone Os

Wed, 12 Feb 2025 18:15:00 +0000

Type	Values Removed	Values Added
Metrics		kev `{'dateAdded': '2025-02-12'}`

Wed, 12 Feb 2025 16:15:00 +0000

Type	Values Removed	Values Added
Metrics	ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`	ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'active', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Tue, 11 Feb 2025 19:15:00 +0000

Type	Values Removed	Values Added
Metrics	cvssV3_1 `{'score': 7.5, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N'}` ssvc `{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`	cvssV3_1 `{'score': 4.6, 'vector': 'CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N'}` ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Tue, 11 Feb 2025 15:15:00 +0000

Type	Values Removed	Values Added
Weaknesses		CWE-863
Metrics		cvssV3_1 `{'score': 7.5, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N'}` ssvc `{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Tue, 11 Feb 2025 06:45:00 +0000

Type	Values Removed	Values Added
References		http://seclists.org/fulldisclosure/2025/Feb/7 http://seclists.org/fulldisclosure/2025/Feb/8

Mon, 10 Feb 2025 19:15:00 +0000

Type	Values Removed	Values Added
Description		An authorization issue was addressed with improved state management. This issue is fixed in iPadOS 17.7.5, iOS 18.3.1 and iPadOS 18.3.1. A physical attack may disable USB Restricted Mode on a locked device. Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals.
References		https://support.apple.com/en-us/122173 https://support.apple.com/en-us/122174

Subscriptions

Apple Ipados Iphone Os

MITRE

Status: PUBLISHED

Assigner: apple

Published: 2025-02-10T19:04:45.242Z

Updated: 2026-04-02T18:09:08.362Z

Reserved: 2025-01-17T00:00:44.999Z

Link: CVE-2025-24200

Vulnrichment

Updated: 2025-11-03T21:07:31.682Z

NVD

Status : Analyzed

Published: 2025-02-10T19:15:40.107

Modified: 2026-04-03T11:44:27.853

Link: CVE-2025-24200

Redhat

No data.

OpenCVE Enrichment

Updated: 2026-04-28T03:45:20Z

Weaknesses

CWE-863

Impact

Affected Systems

Risk and Exploitability

Tracking

Attack Vector Physical

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact None

User Interaction None

Exploitation active

Automatable no

Technical Impact partial

Subscriptions

JSON object

JSON object

JSON object

JSON object

JSON object