PT-2023-21457 · Apple · Airpods

Archie Pusaka + 1 · Publicado 2023-05-04 · Atualizado 2025-08-02 · CVE-2023-27964

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Média

Vetor base

AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions AirPods Firmware versions prior to 5E133

Description An authentication issue was addressed with improved state management. When the headphones are seeking a connection request to one of the previously paired devices, an attacker in Bluetooth range might be able to spoof the intended source device and gain access to the headphones.

Recommendations For AirPods Firmware versions prior to 5E133, update to AirPods Firmware Update 5E133 to resolve the issue. As a temporary workaround, consider restricting Bluetooth connections to trusted devices until the update is applied.

Correção

Authentication Bypass by Spoofing

Enumeração de Fraquezas

CWE-290

Identificadores relacionados

CVE-2023-27964

Produtos afetados

Airpods

Referências · 7

• https://t.me/true_secator/4351 · Publicação no Telegram
• https://twitter.com/whoisexaberri/status/1951677020284268913 · Publicação no Twitter
• https://nvd.nist.gov/vuln/detail/CVE-2023-27964 · Nota de Segurança
• https://t.me/cvenotify/52970 · Publicação no Telegram
• https://osv.dev/vulnerability/CVE-2023-27964 · Aviso do Fabricante
• https://support.apple.com/en-us/HT213752 · Aviso do Fabricante
• https://t.me/cvenotify/53502 · Publicação no Telegram