CVE-2024-44171

Опубликовано: 17 сент. 2024

Источник: nvd

CVSS3: 4.6

EPSS Низкий

Описание

This issue was addressed through improved state management. This issue is fixed in iOS 17.7 and iPadOS 17.7, iOS 18 and iPadOS 18, watchOS 11. An attacker with physical access to a locked device may be able to Control Nearby Devices via accessibility features.

Ссылки

https://support.apple.com/en-us/121240
Release Notes
Vendor Advisory
https://support.apple.com/en-us/121246
Release Notes
Vendor Advisory
https://support.apple.com/en-us/121250
Release Notes
Vendor Advisory
http://seclists.org/fulldisclosure/2024/Sep/32
http://seclists.org/fulldisclosure/2024/Sep/35
http://seclists.org/fulldisclosure/2024/Sep/39

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*

Версия до 17.7 (исключая)

cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*

Версия до 17.7 (исключая)

cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*

Версия до 11.0 (исключая)

EPSS

Процентиль: 20%

0.00062

Низкий

4.6 Medium

CVSS3

Дефекты

NVD-CWE-noinfo

Связанные уязвимости

GHSA-jvcj-gmhm-rfx5