Lucene search
HistoryDec 12, 2023 - 1:15 a.m.
CVE-2023-42897
cve-2023-42897
improved checks
physical access
sensitive user data
4.6 Medium
CVSS3
Attack Vector
PHYSICAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
0.001 Low
EPSS
Percentile
20.7%
The issue was addressed with improved checks. This issue is fixed in iOS 17.2 and iPadOS 17.2. An attacker with physical access may be able to use Siri to access sensitive user data.
Affected configurations
Node
appleipadosRange17.0–17.2
ORappleiphone_osRange17.0–17.2
Related
cve
cve
CVE-2023-42897
2023-12-12 01:15:11
cvelist
cvelist
CVE-2023-42897
2023-12-12 00:27:23
prion
prion
Design/Logic Flaw
2023-12-12 01:15:00
apple
apple
About the security content of iOS 17.2 and iPadOS 17.2
2023-12-11 00:00:00
4.6 Medium
CVSS3
Attack Vector
PHYSICAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
0.001 Low
EPSS
Percentile
20.7%
Related for NVD:CVE-2023-42897