Vulnerabilities > CVE-2023-42855 - Unspecified vulnerability in Apple Iphone OS

047910
CVSS 4.6 - MEDIUM
Attack vector
PHYSICAL
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
NONE
Integrity impact
HIGH
Availability impact
NONE
low complexity
apple
NVD
Published: 2024-02-21
Updated: 2024-12-03

Summary

This issue was addressed with improved state management. This issue is fixed in iOS 17.1 and iPadOS 17.1. An attacker with physical access may be able to silently persist an Apple ID on an erased device.

Vulnerable Configurations

Part Description Count
OS
Apple
308

References