PT-2023-7014 · Apple · Ipados+3
Bistrit Dahal
·
Publicado
2023-10-25
·
Atualizado
2023-11-02
·
CVE-2023-41982
CVSS v2.0
4.9
Média
| Vetor | AV:L/AC:L/Au:N/C:C/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
macOS versions prior to 14.1
watchOS versions prior to 10.1
iOS versions prior to 16.7.2 and 17.1
iPadOS versions prior to 16.7.2 and 17.1
Description
The issue is related to insufficient access control in the Siri personal assistant, which can allow an attacker with physical access to use Siri and gain unauthorized access to sensitive user data. This can be done by exploiting the lack of proper restrictions on options offered on a locked device.
Recommendations
For macOS versions prior to 14.1, update to macOS Sonoma 14.1 to fix the issue.
For watchOS versions prior to 10.1, update to watchOS 10.1 to fix the issue.
For iOS versions prior to 16.7.2, update to iOS 16.7.2 to fix the issue.
For iOS versions prior to 17.1, update to iOS 17.1 to fix the issue.
For iPadOS versions prior to 16.7.2, update to iPadOS 16.7.2 to fix the issue.
For iPadOS versions prior to 17.1, update to iPadOS 17.1 to fix the issue.
Correção
Incorrect Privilege Assignment
Improper Access Control
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Apple Macos
Ios
Ipados
Watchos