CVE-2019-8854 - A user privacy issue was addressed by removing the broadcast MAC address

Back Back to CVE browser

HIGH

A user privacy issue was addressed by removing the broadcast MAC address

Published Oct 27, 2020

7.5

HIGH

CVSS 3.1

EPSS 1.17%

Description

A user privacy issue was addressed by removing the broadcast MAC address. This issue is fixed in macOS Catalina 10.15, watchOS 6, iOS 13, tvOS 13. A device may be passively tracked by its Wi-Fi MAC address.

Affected products

Vendor Apple Product iOS Default
n/a
- Version
  unspecified
  Status
  affected
  Constraints
  <13
Vendor Apple Product macOS Default
n/a
- Version
  unspecified
  Status
  affected
  Constraints
  <10.15
Vendor Apple Product tvOS Default
n/a
- Version
  unspecified
  Status
  affected
  Constraints
  <13
Vendor Apple Product watchOS Default
n/a
- Version
  unspecified
  Status
  affected
  Constraints
  <6

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Apple

iOS

n/a

Version	Status	Constraints
unspecified	affected	<13

Apple

macOS

n/a

Version	Status	Constraints
unspecified	affected	<10.15

Apple

tvOS

n/a

Version	Status	Constraints
unspecified	affected	<13

Apple

watchOS

n/a

Version	Status	Constraints
unspecified	affected	<6

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (5)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-18243
Advisory
https://support.apple.com/en-us/HT210604
x_refsource_MISCRelease NotesVendor Advisory
https://support.apple.com/en-us/HT210606
x_refsource_MISCRelease NotesVendor Advisory
https://support.apple.com/en-us/HT210607
x_refsource_MISCRelease NotesVendor Advisory
https://support.apple.com/en-us/HT210634
x_refsource_MISCRelease NotesVendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-18243		Advisory
https://support.apple.com/en-us/HT210604		x_refsource_MISCRelease NotesVendor Advisory
https://support.apple.com/en-us/HT210606		x_refsource_MISCRelease NotesVendor Advisory
https://support.apple.com/en-us/HT210607		x_refsource_MISCRelease NotesVendor Advisory
https://support.apple.com/en-us/HT210634		x_refsource_MISCRelease NotesVendor Advisory