Session fixation

2024-01-1223:15:00

PRIOn knowledge base

www.prio-n.com

session fixation

session management

accessory security

bluetooth vulnerability

5.9 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

12.8%

JSON

A session management issue was addressed with improved checks. This issue is fixed in Magic Keyboard Firmware Update 2.0.6. An attacker with physical access to the accessory may be able to extract its Bluetooth pairing key and monitor Bluetooth traffic.

CPENameOperatorVersion
magic_keyboard_firmwarelt2.0.6

CPE	Name	Operator	Version
	magic_keyboard_firmware	lt	2.0.6

References

support.apple.com/en-us/HT214050