4.6

CVE-2024-40813

A lock screen issue was addressed with improved state management. This issue is fixed in iOS 17.6 and iPadOS 17.6, watchOS 10.6. An attacker with physical access may be able to use Siri to access sensitive user data.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Apple ≫ iPadOS Version < 17.6
Apple ≫ iPhone OS Version < 17.6
Apple ≫ watchOS Version < 10.6
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.37% 0.281
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 4.6 0.9 3.6
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
134c704f-9b21-4f2e-91b3-4a467353bcc0 4.6 0.9 3.6
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CWE-922 Insecure Storage of Sensitive Information

The product stores sensitive information without properly limiting read or write access by unauthorized actors.

http://seclists.org/fulldisclosure/2024/Jul/16
Third Party Advisory
Mailing List
http://seclists.org/fulldisclosure/2024/Jul/21
Third Party Advisory
Mailing List
https://support.apple.com/kb/HT214117
https://support.apple.com/kb/HT214124
https://support.apple.com/en-us/HT214117
Vendor Advisory
Release Notes
https://support.apple.com/en-us/HT214124
Vendor Advisory
Release Notes
https://support.apple.com/en-us/120909
https://support.apple.com/en-us/120916