PT-2021-6013 · Apple · Ipados+4

Csaba Fitzl + 1 · Published 2021-10-25 · Updated 2022-01-17 · CVE-2021-30808

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions tvOS versions prior to 15 watchOS versions prior to 8 iOS versions prior to 15 iPadOS versions prior to 15 Mac OS (affected versions not specified)

Description The issue is related to errors in security settings, allowing an attacker to modify arbitrary files. A malicious application may be able to modify protected parts of the file system.

Recommendations For tvOS versions prior to 15, update to tvOS 15 to resolve the issue. For watchOS versions prior to 8, update to watchOS 8 to resolve the issue. For iOS versions prior to 15, update to iOS 15 to resolve the issue. For iPadOS versions prior to 15, update to iPadOS 15 to resolve the issue. For Mac OS, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-254

Related Identifiers

BDU:2022-00575

CVE-2021-30808

Affected Products

Apple Macos

Ios

Ipados

Tvos

Watchos

References · 16

• https://support.apple.com/en-us/HT212814 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-30808 · Vendor Advisory
• https://support.apple.com/en-us/HT212819 · Vendor Advisory
• https://support.apple.com/kb/HT212869 · Vendor Advisory
• https://support.apple.com/en-us/HT212815 · Vendor Advisory
• https://bdu.fstec.ru/vul/2022-00575 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2021-30808 · Security Note
• https://t.me/cvenotify/23479 · Telegram Post
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-30808 · Note
• https://cybersecurity-help.cz/vdb/SB2021102713 · Note
• https://support.apple.com/en-us/103236 · Note
• https://t.me/cibsecurity/31411 · Telegram Post
• https://t.me/cvenotify/22592 · Telegram Post
• https://support.apple.com/ru-ru/HT212869 · Note
• https://support.apple.com/en-us/HT212869 · Note