Lucene search

K
cveAppleCVE-2024-23293
HistoryMar 08, 2024 - 2:15 a.m.

CVE-2024-23293

2024-03-0802:15:50
apple
web.nvd.nist.gov
40
cve-2024-23293
state management
tvos
ios
ipados
macos sonoma
watchos
siri
user data

AI Score

6

Confidence

High

EPSS

0

Percentile

10.3%

This issue was addressed through improved state management. This issue is fixed in tvOS 17.4, iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4, watchOS 10.4. An attacker with physical access may be able to use Siri to access sensitive user data.

Affected configurations

Vulners
Node
appletvosRange<17.4
OR
appleiphone_osRange<17.4
OR
appleipad_osRange<17.4
OR
applemacosRange<14.4
OR
applewatchosRange<10.4
VendorProductVersionCPE
appletvos*cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*
appleiphone_os*cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
appleipad_os*cpe:2.3:o:apple:ipad_os:*:*:*:*:*:*:*:*
applemacos*cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*
applewatchos*cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*

CNA Affected

[
  {
    "vendor": "Apple",
    "product": "tvOS",
    "versions": [
      {
        "version": "unspecified",
        "status": "affected",
        "lessThan": "17.4",
        "versionType": "custom"
      }
    ]
  },
  {
    "vendor": "Apple",
    "product": "iOS and iPadOS",
    "versions": [
      {
        "version": "unspecified",
        "status": "affected",
        "lessThan": "17.4",
        "versionType": "custom"
      }
    ]
  },
  {
    "vendor": "Apple",
    "product": "macOS",
    "versions": [
      {
        "version": "unspecified",
        "status": "affected",
        "lessThan": "14.4",
        "versionType": "custom"
      }
    ]
  },
  {
    "vendor": "Apple",
    "product": "watchOS",
    "versions": [
      {
        "version": "unspecified",
        "status": "affected",
        "lessThan": "10.4",
        "versionType": "custom"
      }
    ]
  }
]

AI Score

6

Confidence

High

EPSS

0

Percentile

10.3%