VulnerabilityModified
CVE-2023-42846
This issue was addressed by removing the vulnerable code.
MEDIUM 5.3EPSS 1.24%
Does this matter?
Lower severity and a low EPSS score (1.24%). Track it; it rarely justifies an emergency change on its own.
Description
This issue was addressed by removing the vulnerable code. This issue is fixed in watchOS 10.1, iOS 16.7.2 and iPadOS 16.7.2, tvOS 17.1, iOS 17.1 and iPadOS 17.1. A device may be passively tracked by its Wi-Fi MAC address.
- CVSS 3.1
- 5.3 MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
- EPSS
- 1.24% probability · 68th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-200
- Affected
- apple/ipados · apple/iphone os · apple/tvos · apple/watchos
- Source
- product-security@apple.com
References
- http://seclists.org/fulldisclosure/2023/Oct/19Mailing List, Third Party Advisory
- http://seclists.org/fulldisclosure/2023/Oct/22Mailing List, Third Party Advisory
- http://seclists.org/fulldisclosure/2023/Oct/23Mailing List, Third Party Advisory
- http://seclists.org/fulldisclosure/2023/Oct/25Mailing List, Third Party Advisory
- https://support.apple.com/en-us/HT213981Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT213982Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT213987Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT213988Release Notes, Vendor Advisory
- https://support.apple.com/kb/HT213981Release Notes, Vendor Advisory
- https://support.apple.com/kb/HT213982Release Notes, Vendor Advisory
- https://support.apple.com/kb/HT213987Release Notes, Vendor Advisory
- https://support.apple.com/kb/HT213988Release Notes, Vendor Advisory
- http://seclists.org/fulldisclosure/2023/Oct/19Mailing List, Third Party Advisory
- http://seclists.org/fulldisclosure/2023/Oct/22Mailing List, Third Party Advisory
- http://seclists.org/fulldisclosure/2023/Oct/23Mailing List, Third Party Advisory
- http://seclists.org/fulldisclosure/2023/Oct/25Mailing List, Third Party Advisory
- https://support.apple.com/en-us/HT213981Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT213982Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT213987Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT213988Release Notes, Vendor Advisory
- https://support.apple.com/kb/HT213981Release Notes, Vendor Advisory
- https://support.apple.com/kb/HT213982Release Notes, Vendor Advisory
- https://support.apple.com/kb/HT213987Release Notes, Vendor Advisory
- https://support.apple.com/kb/HT213988Release Notes, Vendor Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.