Lucene search

AppleCVE-2024-40770

HistorySep 17, 2024 - 12:15 a.m.

CVE-2024-40770

2024-09-1700:15:48

CWE-281

apple

web.nvd.nist.gov

macos sequoia

permissions issue

non-privileged user

network settings

fix

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

AI Score

6.2

Confidence

Low

EPSS

0.001

Percentile

18.5%

JSON

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15. A non-privileged user may be able to modify restricted network settings.

Affected configurations

Nvd

Vulners

Node

applemacosRange<15.0

VendorProductVersionCPE
applemacos*cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
apple	macos	*	cpe:2.3:o:apple:macos::::::::

CNA Affected

[
  {
    "vendor": "Apple",
    "product": "macOS",
    "versions": [
      {
        "version": "unspecified",
        "status": "affected",
        "lessThan": "15",
        "versionType": "custom"
      }
    ]
  }
]

References

support.apple.com/en-us/121238

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

AI Score

6.2

Confidence

Low

EPSS

0.001

Percentile

18.5%

JSON

Related for CVE-2024-40770