Man-in-the-middle attack in Moonlight iOS/tvOS
CVE-2020-11024

6.1MEDIUM

Key Information:

Vendor: Moonlight-stream
Status: Moonlight
Vendor: CVE Published:; 29 April 2020

🔔 Create Moonlight-stream Vulnerability Alert

What is CVE-2020-11024?

In Moonlight iOS/tvOS before 4.0.1, the pairing process is vulnerable to a man-in-the-middle attack. The bug has been fixed in Moonlight v4.0.1 for iOS and tvOS.

Affected Version(s)

Moonlight < 4.0.1

References

https://github.com/moonlight-stream/moonlight-ios/securit...

x_refsource_CONFIRM

https://github.com/moonlight-stream/moonlight-ios/pull/405

x_refsource_MISC

https://github.com/moonlight-stream/moonlight-ios/commit/...

x_refsource_MISC

CVSS V3.1

Score:

6.1

Severity:

MEDIUM

Confidentiality:

High

Integrity:

Low

Availability:

High

Attack Vector:

Physical

Attack Complexity:

High

Privileges Required:

Low

User Interaction:

Required

Scope:

Changed

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Apr 29, 2020
Vulnerability Reserved
Mar 30, 2020

CVE-2020-11024 Data

JSON