PT-2017-13119 · Apple · Ios

Ayden Panhuyzen + 2 · Published 2017-11-13 · Updated 2017-11-28 · CVE-2017-13805

Positive Technologies (AI Summary)

CVSS v3.1

2.4

Low

Base vector

AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 11.1

Description The issue involves the Siri component and allows physically proximate attackers to obtain sensitive information via a Siri request for private-content notifications that should not have been available in the lock-screen state.

Recommendations For versions prior to 11.1, update to version 11.1 or later to resolve the issue.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2017-13805

Affected Products

Ios

References · 4

• https://support.apple.com/HT208222 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-13805 · Security Note
• https://osv.dev/vulnerability/CVE-2017-13805 · Vendor Advisory
• http://securitytracker.com/id/1039703 · Note