4.3

CVE-2024-27867

An authentication issue was addressed with improved state management. This issue is fixed in AirPods Firmware Update 6A326, AirPods Firmware Update 6F8, and Beats Firmware Update 6F8. When your headphones are seeking a connection request to one of your previously paired devices, an attacker in Bluetooth range might be able to spoof the intended source device and gain access to your headphones.

Data is provided by the National Vulnerability Database (NVD)
Apple ≫ Airpods Firmware Version < 6a326
   Apple ≫ AirPods Version-
Apple ≫ Powerbeats Firmware Version < 6f8
   Apple ≫ Powerbeats Version-
Apple ≫ Airpods Pro Firmware Version < 6f8
   Apple ≫ Airpods Pro Version-
Apple ≫ Beats Fit Pro Firmware Version < 6f8
   Apple ≫ Beats Fit Pro Version-
Apple ≫ Airpods Max Firmware Version < 6f8
   Apple ≫ Airpods Max Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.06% 0.198
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 4.3 2.8 1.4
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
134c704f-9b21-4f2e-91b3-4a467353bcc0 3.3 1.8 1.4
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
CWE-287 Improper Authentication

When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.