PT-2023-6032 · Apple · Tvos+3
James Hutchins
+2
·
Publicado
2023-09-26
·
Atualizado
2023-10-12
·
CVE-2023-41068
CVSS v3.1
7.8
Alta
| Vetor | AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
tvOS versions prior to 17
iOS versions prior to 17 and prior to 16.7
iPadOS versions prior to 17 and prior to 16.7
watchOS versions prior to 10
Description
The issue is related to inadequate access control in the MobileStorageMounter component of the operating systems. It may allow an attacker to elevate their privileges. The problem is addressed with improved access restrictions.
Recommendations
For tvOS versions prior to 17, update to tvOS 17 to resolve the issue.
For iOS versions prior to 17 and prior to 16.7, update to iOS 17 or iOS 16.7 to resolve the issue.
For iPadOS versions prior to 17 and prior to 16.7, update to iPadOS 17 or iPadOS 16.7 to resolve the issue.
For watchOS versions prior to 10, update to watchOS 10 to resolve the issue.
Correção
Improper Access Control
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Ios
Ipados
Tvos
Watchos