CVE-2013-5161

Vulnerability

Passcode Lock in Apple iOS versions prior to 7.0.2 does not properly manage the lock state during transitions. This allows a physically proximate attacker to bypass the passcode requirement and open the Camera app or read the list of recently opened apps. The vulnerability is triggered by unspecified transition errors in the lock screen logic. Affected versions: iOS before 7.0.2 on iPhone 4 and later.

Exploitation

An attacker with physical access to the device can exploit the lock state transition errors. The exact sequence is not detailed, but it involves manipulating the device during a lock screen transition to cause the passcode check to be bypassed. No authentication or special privileges are required beyond physical proximity.

Impact

Successful exploitation allows the attacker to open the Camera app and view the list of recently opened apps without entering the passcode. This leads to unauthorized access to potentially sensitive information (e.g., recent app usage) and the ability to use the camera. The device remains otherwise locked, but the passcode bypass compromises the intended security.

Mitigation

Apple addressed this issue in iOS 7.0.2, released on September 26, 2013 [1]. Users should update to iOS 7.0.2 or later via Settings > General > Software Update. No workarounds are available for unpatched versions. The vulnerability is not listed on CISA's Known Exploited Vulnerabilities catalog.