| Apple iPad 9th Generation (A2602)
|
|
Security Grade
Calculator v
|
Apple iPad (9th generation)
Category: Tablet • Model / Gen: 9th generation A2602 (Wi-Fi)
Release Date: 2021-09-24 • Status:
|
Security Evaluation
1. Device Security
| Criterion
|
Value
|
Proof
|
Comment
|
| Known hardware tampering
|
Rare
|
🔗 Proof
|
Assessor judgement under the physical-port definition: CVE-2025-24200 allowed physical-access bypass of USB Restricted Mode on vulnerable locked devices. The advisory includes iPad 7th generation and later, including this model. Rare is qualitative, not measured prevalence; this is a software-mediated physical attack, not modified silicon.
|
| Known vulnerabilities
|
Very common
|
[1] 🔗 Proof
|
Qualitative historical assessment: recurring iPadOS disclosures include CVE-2023-42824 and CVE-2025-24200. Both advisory families include iPad 9. Disclosure frequency does not measure infections and does not imply patched versions remain affected.
|
| Prior attacks
|
Rare
|
🔗 Proof
|
Conditional platform-level interpretation: Apple reports sophisticated targeted exploitation in an iOS/iPadOS advisory. It does not identify an A2602 victim. Rare refers to targeted platform history, not a confirmed attack on this exact iPad or measured incidence; strict model-only grading remains unverified.
|
| Updatability
|
Very common
|
🔗 Proof
|
Apple repeatedly supplies compatible signed iPadOS security updates; the reviewed release list includes iPad 9 for iPadOS 27.0.1 on 2026-09-28. Availability does not establish installation.
|
| Category Score
|
Score: 2 / 3
|
2. System Security
| Criterion
|
Value
|
Proof
|
Comment
|
| Authentication with other systems
|
Partial
|
🔗 Proof
|
Protected host services use approved pairing and exchanged keys. This general-purpose platform does not require mutual authentication for every possible public website or third-party connection; Partial is scoped to that broader capability.
|
| Communications
|
Encrypted with up-to-date encryption
|
🔗 Proof
|
Rates modern TLS capability for protected communications, not every application packet. Third-party cleartext traffic and explicit exceptions are not guaranteed encrypted.
|
| Storage
|
Encrypted with up-to-date encryption
|
🔗 Proof
|
Hardware-backed per-file Data Protection protects user flash data. Apple documents AES-128-XTS for A9-A13 devices, including A13 here; do not substitute the AES-256-XTS specification of newer chips. Protection depends on file class and passcode/lock state.
|
| Category Score
|
Score: 2 / 3
|
3. User Authentication
| Criterion
|
Value
|
Proof
|
Comment
|
| Account management
|
Basic
|
[2] 🔗 Proof
|
Personal-use baseline: owner credentials and settings are manageable; separate lower-privilege local users are not assumed. Shared iPad is a distinct managed deployment and is excluded from this baseline.
|
| Authentication
|
Secure
|
[3] 🔗 Proof
|
Touch ID plus a configured device passcode protect local access; platform secure boot verifies trusted system software. Secure describes supported controls, not immunity to vulnerabilities.
|
| Brute-force protection
|
Exist
|
🔗 Proof
|
Secure Enclave enforces escalating delays after failed passcode attempts. Optional erasure after ten failures is not assumed enabled.
|
| Event logging
|
Partial logging
|
🔗 Proof
|
When enabled, App Privacy Report records selected app data/sensor access and contacted domains for seven days. It is not a complete record of every device unlock or login.
|
| Passwords
|
Require change after setup
|
[4] 🔗 Proof
|
Approximate rubric mapping only: the user creates a personal passcode rather than retaining a shared factory secret. Four-digit, six-digit and custom codes are permitted; passcodes can be disabled. A forced post-setup change or universal complexity requirement is not established.
|
| Category Score
|
Score: 2 / 3
|
Technical Specifications
| Property
|
Details
|
| Operating System & App
|
iPadOS; launched with iPadOS 15; individual installed version not inspected. (Companion App: Not required for standalone operation)
|
| Hardware (CPU / GPU)
|
CPU: Apple A13 Bionic • GPU:
|
| Memory & Storage
|
Memory: • Storage: 64 GB or 256 GB
|
| Power, Battery & Charging
|
Battery: Built-in 32.4 Wh rechargeable lithium-polymer battery • Power: 20 W USB-C power adapter included • Charging: Lightning, using Lightning to USB-C cable
|
| Display & Camera
|
Display: 10.2-inch Retina IPS; 2160 x 1620; True Tone • Camera: 8 MP rear Wide; 12 MP front Ultra Wide with Center Stage
|
| Sound & Connectivity
|
Sound: Stereo speakers; dual microphones; 3.5 mm headphone jack • Connectivity: Wi-Fi 5 (802.11ac, 2x2 MIMO); Bluetooth 4.2; Lightning; Smart Connector. A2602 has no cellular modem.
|
| Physical (Dimensions & Mass)
|
Dimensions: 250.6 x 174.1 x 7.5 mm • Mass: 487 g (Wi-Fi model)
|
Assessment scope and limitations
Evidence reviewed on 2026-10-21. Model A2602 is the Wi-Fi iPad (9th generation). This is a literature-based coursework assessment, not a test of a particular unit. Baseline: personal use with Touch ID and a passcode configured; Shared iPad and MDM policies are excluded. Historical issues do not prove current exposure.
Rare and Very common are qualitative assessor judgements because the rubric provides no numeric thresholds. Prior attacks is conditional on platform-level interpretation: no A2602-specific incident was established. The password option is an imperfect mapping, not proof of mandatory post-setup password change. A strict model-only or literal-password interpretation requires marker review; the displayed grade is conditional.
Historical vulnerability examples
- CVE-2023-42824: a local attacker with a foothold could gain privileges on a vulnerable build. Fixed in iPadOS 17.0.3, released 2023-10-04. Apple lists iPad 6th generation and later. Reports about older iOS exploitation do not identify A2602 victims. Apple security advisory
- CVE-2025-24200: a physical attacker could bypass USB Restricted Mode on a locked vulnerable device; fixed in iPadOS 18.3.1, released 2025-02-10. Apple includes iPad 7th generation and later. This is historical patched exposure, not a claim that current firmware remains vulnerable. Apple security advisory
Product evidence and scoring
A2602 identification: Apple model guide. Parameters: Apple specifications. First retail availability on 2021-09-24: Apple launch announcement. Current retail status and RAM are not asserted.
Conditional calculation using the displayed interpretations: Device = ceil((2+3+2+1)/4)=2; System = ceil((2+1+1)/3)=2; User Authentication = ceil((2+1+1+2+2)/5)=2. Total 6 = B. This is the website device-risk rating, not coursework or bonus marks. Methodology
