Authentication Vulnerability in Apple Watch Ultra Depth App
CVE-2023-40418

5.5MEDIUM

Key Information:

Vendor

Apple
Status
Watch OS
Vendor
CVE Published:
27 September 2023

What is CVE-2023-40418?

The Apple Watch Ultra's Depth app experienced an authentication issue that may prevent the device from locking when in use. This flaw was rectified with updates included in watchOS 10, which enhance state management. Users are encouraged to ensure their devices are updated to mitigate potential security risks.

Affected Version(s)

watchOS < 10

References

https://support.apple.com/en-us/HT213937
http://seclists.org/fulldisclosure/2023/Oct/9

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.