Apple · Ios · CVE-2021-30874
**Name of the Vulnerable Software and Affected Versions**
iOS versions prior to 15
iPadOS versions prior to 15
**Description**
An authorization issue was addressed with improved state management, allowing a VPN configuration to be installed by an app without user permission.
**Recommendations**
For iOS versions prior to 15, update to iOS 15 or later to resolve the issue.
For iPadOS versions prior to 15, update to iPadOS 15 or later to resolve the issue.