What’s Vulnerable › Vulnerabilities

CVE-2010-1810

• Severity: low (CVSS 3.5 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.6% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2010-09-09 · updated 2026-06-16

Description

FaceTime in Apple iOS before 4.1 on the iPhone and iPod touch does not properly handle invalid X.509 certificates, which allows man-in-the-middle attackers to redirect calls via a crafted certificate.

Affected products

• Apple Iphone Os: through 4.0.2; 1.0.0, 1.0.1, 1.0.2, 1.1.0, 1.1.1, 1.1.2 (+20)

References

• http://lists.apple.com/archives/security-announce/2010//Sep/msg00002.html
• http://support.apple.com/kb/HT4334
• https://exchange.xforce.ibmcloud.com/vulnerabilities/61695
• http://lists.apple.com/archives/security-announce/2010//Sep/msg00002.html
• http://support.apple.com/kb/HT4334
• https://exchange.xforce.ibmcloud.com/vulnerabilities/61695

Get alerted when CVE-2010-1810 or the next vulnerability affects your stack