Lucene search

K

Apple TV < 18.1 Multiple Vulnerabilities (121569)

Remote Apple TV devices prior to version 18.1 have multiple vulnerabilities requiring an upgrade.

Show more
Related
Refs
Code
#%NASL_MIN_LEVEL 80900
##
# (C) Tenable, Inc.
##

include('compat.inc');

if (description)
{
  script_id(211992);
  script_version("1.3");
  script_set_attribute(attribute:"plugin_modification_date", value:"2024/12/12");

  script_cve_id(
    "CVE-2024-44215",
    "CVE-2024-44232",
    "CVE-2024-44233",
    "CVE-2024-44234",
    "CVE-2024-44239",
    "CVE-2024-44240",
    "CVE-2024-44244",
    "CVE-2024-44252",
    "CVE-2024-44255",
    "CVE-2024-44258",
    "CVE-2024-44273",
    "CVE-2024-44277",
    "CVE-2024-44282",
    "CVE-2024-44285",
    "CVE-2024-44296",
    "CVE-2024-44297",
    "CVE-2024-44302"
  );
  script_xref(name:"APPLE-SA", value:"121569");
  script_xref(name:"APPLE-SA", value:"APPLE-SA-10-28-2024-7");

  script_name(english:"Apple TV < 18.1 Multiple Vulnerabilities (121569)");

  script_set_attribute(attribute:"synopsis", value:
"The remote Apple TV device is affected by multiple vulnerabilities");
  script_set_attribute(attribute:"description", value:
"According to its banner, the version of Apple TV on the remote device is prior to 18.1. It is therefore affected by
multiple vulnerabilities as described in the 121569 security advisory.");
  script_set_attribute(attribute:"see_also", value:"https://support.apple.com/en-us/121569");
  script_set_attribute(attribute:"solution", value:
"Upgrade to Apple TV version 18.1 or later.");
  script_set_cvss_base_vector("CVSS2#AV:L/AC:L/Au:N/C:C/I:C/A:C");
  script_set_cvss_temporal_vector("CVSS2#E:POC/RL:OF/RC:C");
  script_set_cvss3_base_vector("CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H");
  script_set_cvss3_temporal_vector("CVSS:3.0/E:P/RL:O/RC:C");
  script_set_attribute(attribute:"cvss_score_source", value:"CVE-2024-44277");
  script_set_attribute(attribute:"cvss3_score_source", value:"CVE-2024-44285");

  script_set_attribute(attribute:"exploitability_ease", value:"Exploits are available");
  script_set_attribute(attribute:"exploit_available", value:"true");

  script_set_attribute(attribute:"vuln_publication_date", value:"2024/10/28");
  script_set_attribute(attribute:"patch_publication_date", value:"2024/10/28");
  script_set_attribute(attribute:"plugin_publication_date", value:"2024/12/02");

  script_set_attribute(attribute:"plugin_type", value:"remote");
  script_set_attribute(attribute:"cpe", value:"cpe:/a:apple:apple_tv");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_family(english:"Misc.");

  script_copyright(english:"This script is Copyright (C) 2024 and is owned by Tenable, Inc. or an Affiliate thereof.");

  script_dependencies("appletv_version.nasl");
  script_require_keys("AppleTV/Version", "AppleTV/Model", "AppleTV/URL", "AppleTV/Port");
  script_require_ports("Services/www", 7000);

  exit(0);
}

include('appletv_func.inc');

var url = get_kb_item('AppleTV/URL');
if (empty_or_null(url)) exit(0, 'Cannot determine Apple TV URL.');
var port = get_kb_item('AppleTV/Port');
if (empty_or_null(port)) exit(0, 'Cannot determine Apple TV port.');

var build = get_kb_item('AppleTV/Version');
if (empty_or_null(build)) audit(AUDIT_UNKNOWN_DEVICE_VER, 'Apple TV');

var model = get_kb_item('AppleTV/Model');
if (empty_or_null(model)) exit(0, 'Cannot determine Apple TV model.');

var fixed_build = '22J580';
var tvos_ver = '18.1';

# determine gen from the model
var gen = APPLETV_MODEL_GEN[model];

appletv_check_version(
  build          : build,
  fix            : fixed_build,
  affected_gen   : make_list(4,5,6),
  fix_tvos_ver   : tvos_ver,
  model          : model,
  gen            : gen,
  port           : port,
  url            : url,
  severity       : SECURITY_HOLE
);

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo
02 Dec 2024 00:00Current
7.2High risk
Vulners AI Score7.2
CVSS37.8
SSVC
3
.json
Report