Remote Apple TV devices prior to version 18.1 have multiple vulnerabilities requiring an upgrade.
Reporter | Title | Published | Views | Family All 170 |
---|---|---|---|---|
![]() | About the security content of tvOS 18.1 | 28 Oct 202400:00 | – | apple |
![]() | About the security content of visionOS 2.1 | 28 Oct 202400:00 | – | apple |
![]() | About the security content of watchOS 11.1 | 28 Oct 202400:00 | – | apple |
![]() | About the security content of iOS 17.7.1 and iPadOS 17.7.1 | 28 Oct 202400:00 | – | apple |
![]() | About the security content of iOS 18.1 and iPadOS 18.1 | 28 Oct 202400:00 | – | apple |
![]() | About the security content of Safari 18.1 | 29 Oct 202400:00 | – | apple |
![]() | About the security content of macOS Sonoma 14.7.1 | 28 Oct 202400:00 | – | apple |
![]() | About the security content of macOS Ventura 13.7.1 | 28 Oct 202400:00 | – | apple |
![]() | About the security content of macOS Sequoia 15.1 | 28 Oct 202400:00 | – | apple |
![]() | [SECURITY] Fedora 39 Update: webkitgtk-2.46.3-1.fc39 | 4 Nov 202401:37 | – | fedora |
#%NASL_MIN_LEVEL 80900
##
# (C) Tenable, Inc.
##
include('compat.inc');
if (description)
{
script_id(211992);
script_version("1.3");
script_set_attribute(attribute:"plugin_modification_date", value:"2024/12/12");
script_cve_id(
"CVE-2024-44215",
"CVE-2024-44232",
"CVE-2024-44233",
"CVE-2024-44234",
"CVE-2024-44239",
"CVE-2024-44240",
"CVE-2024-44244",
"CVE-2024-44252",
"CVE-2024-44255",
"CVE-2024-44258",
"CVE-2024-44273",
"CVE-2024-44277",
"CVE-2024-44282",
"CVE-2024-44285",
"CVE-2024-44296",
"CVE-2024-44297",
"CVE-2024-44302"
);
script_xref(name:"APPLE-SA", value:"121569");
script_xref(name:"APPLE-SA", value:"APPLE-SA-10-28-2024-7");
script_name(english:"Apple TV < 18.1 Multiple Vulnerabilities (121569)");
script_set_attribute(attribute:"synopsis", value:
"The remote Apple TV device is affected by multiple vulnerabilities");
script_set_attribute(attribute:"description", value:
"According to its banner, the version of Apple TV on the remote device is prior to 18.1. It is therefore affected by
multiple vulnerabilities as described in the 121569 security advisory.");
script_set_attribute(attribute:"see_also", value:"https://support.apple.com/en-us/121569");
script_set_attribute(attribute:"solution", value:
"Upgrade to Apple TV version 18.1 or later.");
script_set_cvss_base_vector("CVSS2#AV:L/AC:L/Au:N/C:C/I:C/A:C");
script_set_cvss_temporal_vector("CVSS2#E:POC/RL:OF/RC:C");
script_set_cvss3_base_vector("CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H");
script_set_cvss3_temporal_vector("CVSS:3.0/E:P/RL:O/RC:C");
script_set_attribute(attribute:"cvss_score_source", value:"CVE-2024-44277");
script_set_attribute(attribute:"cvss3_score_source", value:"CVE-2024-44285");
script_set_attribute(attribute:"exploitability_ease", value:"Exploits are available");
script_set_attribute(attribute:"exploit_available", value:"true");
script_set_attribute(attribute:"vuln_publication_date", value:"2024/10/28");
script_set_attribute(attribute:"patch_publication_date", value:"2024/10/28");
script_set_attribute(attribute:"plugin_publication_date", value:"2024/12/02");
script_set_attribute(attribute:"plugin_type", value:"remote");
script_set_attribute(attribute:"cpe", value:"cpe:/a:apple:apple_tv");
script_end_attributes();
script_category(ACT_GATHER_INFO);
script_family(english:"Misc.");
script_copyright(english:"This script is Copyright (C) 2024 and is owned by Tenable, Inc. or an Affiliate thereof.");
script_dependencies("appletv_version.nasl");
script_require_keys("AppleTV/Version", "AppleTV/Model", "AppleTV/URL", "AppleTV/Port");
script_require_ports("Services/www", 7000);
exit(0);
}
include('appletv_func.inc');
var url = get_kb_item('AppleTV/URL');
if (empty_or_null(url)) exit(0, 'Cannot determine Apple TV URL.');
var port = get_kb_item('AppleTV/Port');
if (empty_or_null(port)) exit(0, 'Cannot determine Apple TV port.');
var build = get_kb_item('AppleTV/Version');
if (empty_or_null(build)) audit(AUDIT_UNKNOWN_DEVICE_VER, 'Apple TV');
var model = get_kb_item('AppleTV/Model');
if (empty_or_null(model)) exit(0, 'Cannot determine Apple TV model.');
var fixed_build = '22J580';
var tvos_ver = '18.1';
# determine gen from the model
var gen = APPLETV_MODEL_GEN[model];
appletv_check_version(
build : build,
fix : fixed_build,
affected_gen : make_list(4,5,6),
fix_tvos_ver : tvos_ver,
model : model,
gen : gen,
port : port,
url : url,
severity : SECURITY_HOLE
);
Transform Your Security Services
Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.
Book a live demo