Today I had an iPhone 4S (CDMA) that I needed to image. It was locked and the password was unknown. Cellebrite Physical Analyzer was able to crack the password, and get a physical dump of the phone in under two (2) hours.
Physical analyzer is becoming stronger and stronger with each new release. I am excited to see what new abilities will be available in the near future!