CVE-2020-27951

EPSS 0.44%
Veröffentlicht 02.04.2021 18:15:16
Zuletzt bearbeitet 21.11.2024 05:22:06
Quelle product-security@apple.com
Teams Watchlist Login
Unerledigt Login

This issue was addressed with improved checks. This issue is fixed in watchOS 6.3, iOS 12.5, iOS 14.3 and iPadOS 14.3, watchOS 7.2. Unauthorized code execution may lead to an authentication policy violation.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 0 Referenzen 7

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Apple ≫ iPadOS Version < 14.3

Apple ≫ iPhone OS Version < 12.5

Apple ≫ iPhone OS Version >= 14.0 < 14.3

Apple ≫ watchOS Version >= 6.0 < 6.3

Apple ≫ watchOS Version >= 7.0 < 7.2

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.44%	0.603

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	7.8	1.8	5.9	CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
nvd@nist.gov	6.8	8.6	6.4	AV:N/AC:M/Au:N/C:P/I:P/A:P

https://support.apple.com/en-us/HT212003

Vendor Advisory

https://support.apple.com/en-us/HT212009

Vendor Advisory

https://support.apple.com/en-us/HT212004

Vendor Advisory

https://support.apple.com/en-us/HT212006

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2020-27951

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2020-27951

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2020-27951

EUVD