PT-2023-7179 · Apple · Ipados+3
Bistrit Dahal
·
Publicado
2023-10-25
·
Atualizado
2023-11-02
·
CVE-2023-41997
CVSS v2.0
4.9
Média
| Vetor | AV:L/AC:L/Au:N/C:C/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
macOS versions prior to 14.1
watchOS versions prior to 10.1
iOS versions prior to 16.7.2 and prior to 17.1
iPadOS versions prior to 16.7.2 and prior to 17.1
Description
This issue is related to insufficient access control in the Siri personal assistant for macOS, watchOS, iOS, and iPadOS operating systems. An attacker with physical access may be able to use Siri to access sensitive user data by exploiting the lack of proper restrictions on a locked device.
Recommendations
For macOS versions prior to 14.1, update to macOS Sonoma 14.1 to fix the issue.
For watchOS versions prior to 10.1, update to watchOS 10.1 to fix the issue.
For iOS versions prior to 16.7.2, update to iOS 16.7.2 to fix the issue.
For iOS versions prior to 17.1, update to iOS 17.1 to fix the issue.
For iPadOS versions prior to 16.7.2, update to iPadOS 16.7.2 to fix the issue.
For iPadOS versions prior to 17.1, update to iPadOS 17.1 to fix the issue.
As a temporary workaround, consider restricting the use of Siri on locked devices to minimize the risk of exploitation.
Correção
Incorrect Privilege Assignment
Improper Access Control
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Apple Macos
Ios
Ipados
Watchos