PT-2024-4836 · Apple · Ipados+1

Adam Berry · Published 2024-05-13 · Updated 2024-12-12 · CVE-2024-27835

Positive Technologies (AI Summary)

CVSS v3.1

2.4

Low

Base vector

AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 17.5 iPadOS versions prior to 17.5

Description: The issue is related to errors in security settings of the Notes component in iOS and iPadOS, allowing an attacker with physical access to the device to potentially access notes from the lock screen. This is achieved through improved state management.

Recommendations: For iOS versions prior to 17.5, update to iOS 17.5 to resolve the issue. For iPadOS versions prior to 17.5, update to iPadOS 17.5 to resolve the issue.

Fix

Improper Authentication

Weakness Enumeration

CWE-287

CWE-254

Related Identifiers

BDU:2024-05360

CVE-2024-27835

Affected Products

Ios

Ipados

References · 9

• https://bdu.fstec.ru/vul/2024-05360 · Security Note
• https://osv.dev/vulnerability/CVE-2024-27835 · Vendor Advisory
• https://support.apple.com/kb/HT214101 · Vendor Advisory
• https://support.apple.com/en-us/HT214101 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-27835 · Security Note
• http://seclists.org/fulldisclosure/2024/May/10 · Note
• https://support.apple.com/en-us/120905 · Note
• https://cybersecurity-help.cz/vdb/SB2024051402 · Note
• https://t.me/cvenotify/103615 · Telegram Post