PT-2023-6032 · Apple · Tvos+3
James Hutchins
+2
·
Published
2023-09-26
·
Updated
2023-10-12
·
CVE-2023-41068
CVSS v3.1
7.8
High
| Vector | AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
tvOS versions prior to 17
iOS versions prior to 17 and prior to 16.7
iPadOS versions prior to 17 and prior to 16.7
watchOS versions prior to 10
Description
The issue is related to inadequate access control in the MobileStorageMounter component of the operating systems. It may allow an attacker to elevate their privileges. The problem is addressed with improved access restrictions.
Recommendations
For tvOS versions prior to 17, update to tvOS 17 to resolve the issue.
For iOS versions prior to 17 and prior to 16.7, update to iOS 17 or iOS 16.7 to resolve the issue.
For iPadOS versions prior to 17 and prior to 16.7, update to iPadOS 17 or iPadOS 16.7 to resolve the issue.
For watchOS versions prior to 10, update to watchOS 10 to resolve the issue.
Fix
Improper Access Control
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Ios
Ipados
Tvos
Watchos