PT-2021-4680 · Apple · Watchos+4
Ian Beer
·
Published
2021-05-24
·
Updated
2021-09-16
·
CVE-2021-30715
CVSS v2.0
7.8
High
| Vector | AV:N/AC:L/Au:N/C:N/I:N/A:C |
Name of the Vulnerable Software and Affected Versions
Apple iOS versions prior to 14.6
Apple iPadOS versions prior to 14.6
Apple macOS versions prior to 11.4
Apple tvOS versions prior to 14.6
Apple watchOS versions prior to 7.5
macOS Catalina versions prior to Security Update 2021-003
Description
A logic issue was addressed with improved state management. This issue may lead to a denial of service when processing a maliciously crafted message. The vulnerability is caused by a logic error during the authentication procedure, which can be exploited by a remote attacker to cause a denial of service.
Recommendations
For iOS versions prior to 14.6, update to iOS 14.6 or later.
For iPadOS versions prior to 14.6, update to iPadOS 14.6 or later.
For macOS Big Sur versions prior to 11.4, update to macOS Big Sur 11.4 or later.
For macOS Catalina versions prior to Security Update 2021-003, apply Security Update 2021-003 or later.
For tvOS versions prior to 14.6, update to tvOS 14.6 or later.
For watchOS versions prior to 7.5, update to watchOS 7.5 or later.
Fix
Improper Authentication
RCE
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Apple Macos
Ios
Ipados
Tvos
Watchos