Vulnerabilities > CVE-2023-32417 - Unspecified vulnerability in Apple Watchos

CVSS 2.4 - LOW

Attack vector

PHYSICAL

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

LOW

Integrity impact

NONE

Availability impact

NONE

low complexity

apple

NVD

Published: 2023-06-23

Updated: 2023-09-06

Summary

This issue was addressed by restricting options offered on a locked device. This issue is fixed in watchOS 9.5. An attacker with physical access to a locked Apple Watch may be able to view user photos or contacts via accessibility features.

Vulnerable Configurations

Part	Description	Count
OS	Apple Apple Watchos 1.0 Apple Watchos 1.0.1 Apple Watchos 2.0 Apple Watchos 2.0.1 Apple Watchos 2.1 Apple Watchos 2.2 Apple Watchos 2.2.0 Apple Watchos 2.2.1 Apple Watchos 2.2.2 Apple Watchos 3.0 Apple Watchos 3.1 Apple Watchos 3.1.1 Apple Watchos 3.1.3 Apple Watchos 3.2 Apple Watchos 3.2.2 Apple Watchos 3.2.3 Apple Watchos 4 Apple Watchos 4.0 Apple Watchos 4.0.1 Apple Watchos 4.1 Apple Watchos 4.2 Apple Watchos 4.2.3 Apple Watchos 4.3 Apple Watchos 4.3.1 Apple Watchos 4.3.2 Apple Watchos 5.0 Apple Watchos 5.0.1 Apple Watchos 5.1 Apple Watchos 5.1.1 Apple Watchos 5.1.2 Apple Watchos 5.1.3 Apple Watchos 5.2 Apple Watchos 5.2.1 Apple Watchos 5.3 Apple Watchos 5.3.4 Apple Watchos 5.3.7 Apple Watchos 5.3.9 Apple Watchos 6.0 Apple Watchos 6.0.0 Apple Watchos 6.0.1 Apple Watchos 6.1 Apple Watchos 6.1.1 Apple Watchos 6.1.2 Apple Watchos 6.1.3 Apple Watchos 6.2 Apple Watchos 6.2.5 Apple Watchos 6.2.6 Apple Watchos 6.2.8 Apple Watchos 6.2.9 Apple Watchos 7.0 Apple Watchos 7.1 Apple Watchos 7.2 Apple Watchos 7.3 Apple Watchos 7.3.2 Apple Watchos 7.3.3 Apple Watchos 7.4 Apple Watchos 7.4.1 Apple Watchos 7.5 Apple Watchos 7.6 Apple Watchos 7.6.2 Apple Watchos 8.0 Apple Watchos 8.1 Apple Watchos 8.3 Apple Watchos 8.5 Apple Watchos 8.6 Apple Watchos 8.7 Apple Watchos 9.0 Apple Watchos 9.1 Apple Watchos 9.2 Apple Watchos 9.3 Apple Watchos 9.4	71

Summary

Vulnerable Configurations

References