CVE-2025-31216 Details
Description
The issue was addressed with improved checks. This issue is fixed in iOS 18.5 and iPadOS 18.5, iPadOS 17.7.7. An attacker with physical access to a device may be able to override managed Wi-Fi profiles.
A vulnerability exists in iOS 18.5 and iPadOS 17.7.7 that allows an attacker with physical access to a device to override managed Wi-Fi profiles. This issue has been addressed with improved checks.
Users can update to iOS 18.5 or iPadOS 17.7.7 to address this vulnerability.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed Nov 23, 2025References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://support.apple.com/en-us/122404 | [email protected] | Release NotesVendor Advisory |
| https://support.apple.com/en-us/122405 | [email protected] | Release NotesVendor Advisory |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-284 | Improper Access Control | CISA-ADP |
Affected Products
| Product | Versions |
|---|---|
| apple ipados | < 17.7.7 >= 18.0, < 18.5 |
CPE
Remediation
| |
| apple iphone os | < 18.5 |
CPE
Remediation
| |
Change History
6 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | [email protected] |
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| Apr 2, 2026 | CVE Modified | [email protected] |
| Nov 26, 2025 | Initial Analysis | [email protected] |
| Nov 23, 2025 | CVE Modified | CISA-ADP |
| Nov 21, 2025 | New CVE Received | [email protected] |