Authentication Vulnerability in Apple iOS and iPadOS Products
CVE-2024-23219

6.2MEDIUM

Key Information:

Vendor
Apple
Status
iOS and iPadOS
Vendor
CVE Published:
23 January 2024

Summary

An authentication vulnerability has been identified within Apple’s iOS 17.3 and iPadOS 17.3 frameworks, which could lead to an unintentional disablement of Stolen Device Protection. This may expose devices to unauthorized access, compromising user security and device integrity. It is crucial for users to ensure they are operating on the latest versions to protect their devices.

Affected Version(s)

iOS and iPadOS < 17.3

References

https://support.apple.com/en-us/HT214059
http://seclists.org/fulldisclosure/2024/Jan/33

CVSS V3.1

Score:
6.2
Severity:
MEDIUM
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.