Vulnerabilities > CVE-2024-23277 - Unspecified vulnerability in Apple Ipad OS, Iphone OS and Macos

CVSS 5.9 - MEDIUM

Attack vector

NETWORK

Attack complexity

HIGH

Privileges required

NONE

Confidentiality impact

NONE

Integrity impact

HIGH

Availability impact

NONE

network

high complexity

apple

NVD

Published: 2024-03-08

Updated: 2024-11-21

Summary

The issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.4, iOS 17.4 and iPadOS 17.4. An attacker in a privileged network position may be able to inject keystrokes by spoofing a keyboard.

Vulnerable Configurations

Part	Description	Count
OS	Apple Apple Iphone OS 17.0 Apple Iphone OS 17.0.1 Apple Iphone OS 17.0.3 Apple Iphone OS 17.1 Apple Iphone OS 17.1.1 Apple Iphone OS 17.1.2 Apple Iphone OS 17.2 Apple Iphone OS 17.3 Apple Macos 14.0 Apple Macos 14.1 Apple Macos 14.1.1 Apple Macos 14.1.2 Apple Macos 14.2 Apple Macos 14.2.1 Apple Macos 14.3 Apple Ipad OS 17.0.3 Apple Ipad OS 17.2	17

References

http://seclists.org/fulldisclosure/2024/Mar/21
http://seclists.org/fulldisclosure/2024/Mar/21
https://support.apple.com/en-us/HT214081
https://support.apple.com/en-us/HT214081
https://support.apple.com/en-us/HT214084
https://support.apple.com/en-us/HT214084