PT-2024-13060

CVE-2023-42855

·

Published

2024-02-20

·

Updated

2024-12-03

Description by

CVSS 3.1
4.6
Medium
MetricsAV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Name of the Vulnerable Software and Affected Versions iOS versions prior to 17.1 iPadOS versions prior to 17.1
Description This issue allows an attacker with physical access to silently persist an Apple ID on an erased device. The issue was addressed with improved state management.
Recommendations For iOS versions prior to 17.1, update to iOS 17.1 to resolve the issue. For iPadOS versions prior to 17.1, update to iPadOS 17.1 to resolve the issue.
Exploitability
Fix
Researchers
Vendors
Affected products
Related identifiers
CVE-2023-42855
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com