Vulnerabilities > CVE-2023-40418 - Unspecified vulnerability in Apple Watchos

CVSS 5.5 - MEDIUM

Attack vector

LOCAL

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

NONE

Integrity impact

HIGH

Availability impact

NONE

local

low complexity

apple

NVD

Published: 2023-09-27

Updated: 2023-10-12

Summary

An authentication issue was addressed with improved state management. This issue is fixed in watchOS 10. An Apple Watch Ultra may not lock when using the Depth app.

Vulnerable Configurations

Part	Description	Count
OS	Apple Apple Watchos - Apple Watchos 1.0 Apple Watchos 1.0.1 Apple Watchos 2.0 Apple Watchos 2.0.1 Apple Watchos 2.1 Apple Watchos 2.2 Apple Watchos 2.2.0 Apple Watchos 2.2.1 Apple Watchos 2.2.2 Apple Watchos 3.0 Apple Watchos 3.1 Apple Watchos 3.1.1 Apple Watchos 3.1.3 Apple Watchos 3.2 Apple Watchos 3.2.2 Apple Watchos 3.2.3 Apple Watchos 4 Apple Watchos 4.0 Apple Watchos 4.0.1 Apple Watchos 4.1 Apple Watchos 4.2 Apple Watchos 4.2.3 Apple Watchos 4.3 Apple Watchos 4.3.1 Apple Watchos 4.3.2 Apple Watchos 5.0 Apple Watchos 5.0.1 Apple Watchos 5.1 Apple Watchos 5.1.1 Apple Watchos 5.1.2 Apple Watchos 5.1.3 Apple Watchos 5.2 Apple Watchos 5.2.1 Apple Watchos 5.3 Apple Watchos 5.3.4 Apple Watchos 5.3.7 Apple Watchos 5.3.9 Apple Watchos 6.0 Apple Watchos 6.0.0 Apple Watchos 6.0.1 Apple Watchos 6.1 Apple Watchos 6.1.1 Apple Watchos 6.1.2 Apple Watchos 6.1.3 Apple Watchos 6.2 Apple Watchos 6.2.5 Apple Watchos 6.2.6 Apple Watchos 6.2.8 Apple Watchos 6.2.9 Apple Watchos 7.0 Apple Watchos 7.1 Apple Watchos 7.2 Apple Watchos 7.3 Apple Watchos 7.3.2 Apple Watchos 7.3.3 Apple Watchos 7.4 Apple Watchos 7.4.1 Apple Watchos 7.5 Apple Watchos 7.6 Apple Watchos 7.6.2 Apple Watchos 8.0 Apple Watchos 8.1 Apple Watchos 8.3 Apple Watchos 8.5 Apple Watchos 8.6 Apple Watchos 8.7 Apple Watchos 9.0 Apple Watchos 9.1 Apple Watchos 9.2 Apple Watchos 9.3 Apple Watchos 9.4 Apple Watchos 9.5 Apple Watchos 9.6 Apple Watchos 9.6.3	75
Hardware	Apple Apple Watch Ultra - Apple Watch Ultra 2 -	2

Summary

Vulnerable Configurations

References