Lucene search

AppleCVE-2024-40829

HistoryJul 29, 2024 - 11:15 p.m.

CVE-2024-40829

2024-07-2923:15:14

apple

web.nvd.nist.gov

cve-2024-40829

security checks

watchos

ios

ipados

macos

lock screen.

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

AI Score

5.6

Confidence

Low

EPSS

Percentile

13.5%

JSON

The issue was addressed with improved checks. This issue is fixed in watchOS 10.6, iOS 17.6 and iPadOS 17.6, iOS 16.7.9 and iPadOS 16.7.9, macOS Ventura 13.6.8. An attacker may be able to view restricted content from the lock screen.

Affected configurations

Vulners

Vulnrichment

Node

iphone_osRange<17.6

ipad_osRange<17.6

iphone_osRange<16.7

ipad_osRange<16.7

macosRange<13.6

watchosRange<10.6

VendorProductVersionCPE
*iphone_os*cpe:2.3:apple:*:iphone_os:*:*:*:*:*:*:*:*
*ipad_os*cpe:2.3:apple:*:ipad_os:*:*:*:*:*:*:*:*
*macos*cpe:2.3:apple:*:macos:*:*:*:*:*:*:*:*
*watchos*cpe:2.3:apple:*:watchos:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
*	iphone_os	*	cpe:2.3:apple::iphone_os::::::::*
*	ipad_os	*	cpe:2.3:apple::ipad_os::::::::*
*	macos	*	cpe:2.3:apple::macos::::::::*
*	watchos	*	cpe:2.3:apple::watchos::::::::*

CNA Affected

[
  {
    "vendor": "Apple",
    "product": "iOS and iPadOS",
    "versions": [
      {
        "version": "unspecified",
        "status": "affected",
        "lessThan": "17.6",
        "versionType": "custom"
      }
    ]
  },
  {
    "vendor": "Apple",
    "product": "iOS and iPadOS",
    "versions": [
      {
        "version": "unspecified",
        "status": "affected",
        "lessThan": "16.7",
        "versionType": "custom"
      }
    ]
  },
  {
    "vendor": "Apple",
    "product": "macOS",
    "versions": [
      {
        "version": "unspecified",
        "status": "affected",
        "lessThan": "13.6",
        "versionType": "custom"
      }
    ]
  },
  {
    "vendor": "Apple",
    "product": "watchOS",
    "versions": [
      {
        "version": "unspecified",
        "status": "affected",
        "lessThan": "10.6",
        "versionType": "custom"
      }
    ]
  }
]

References

seclists.org/fulldisclosure/2024/Jul/16

seclists.org/fulldisclosure/2024/Jul/17

seclists.org/fulldisclosure/2024/Jul/19

seclists.org/fulldisclosure/2024/Jul/21

support.apple.com/en-us/HT214116

support.apple.com/en-us/HT214117

support.apple.com/en-us/HT214120

support.apple.com/en-us/HT214124

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

AI Score

5.6

Confidence

Low

EPSS

Percentile

13.5%

JSON

Related for CVE-2024-40829