CVE-2020-9992 - This issue was addressed by encrypting communications over the network to devices running iOS 14, iPadOS 14, tvOS 14, and watchOS 7

Back Back to CVE browser

HIGH

This issue was addressed by encrypting communications over the network to devices running iOS 14, iPadOS 14, tvOS 14, and watchOS 7

Published Oct 16, 2020

7.8

HIGH

CVSS 3.1

EPSS 2.99%

Description

This issue was addressed by encrypting communications over the network to devices running iOS 14, iPadOS 14, tvOS 14, and watchOS 7. This issue is fixed in iOS 14.0 and iPadOS 14.0, Xcode 12.0. An attacker in a privileged network position may be able to execute arbitrary code on a paired device during a debug session over the network.

Affected products

Vendor Apple Product Xcode Default
n/a
- Version
  unspecified
  Status
  affected
  Constraints
  <Xcode 12.0
Vendor Apple Product iOS Default
n/a
- Version
  unspecified
  Status
  affected
  Constraints
  <iOS 14.0 and iPadOS 14.0

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Apple

Xcode

n/a

Version	Status	Constraints
unspecified	affected	<Xcode 12.0

Apple

iOS

n/a

Version	Status	Constraints
unspecified	affected	<iOS 14.0 and iPadOS 14.0

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (3)

http://seclists.org/fulldisclosure/2020/Nov/20
mailing-listx_refsource_FULLDISCMailing ListThird Party Advisory
https://support.apple.com/HT211848
x_refsource_MISCRelease NotesVendor Advisory
https://support.apple.com/HT211850
x_refsource_MISCRelease NotesVendor Advisory

Link	Providers	Tags
http://seclists.org/fulldisclosure/2020/Nov/20		mailing-listx_refsource_FULLDISCMailing ListThird Party Advisory
https://support.apple.com/HT211848		x_refsource_MISCRelease NotesVendor Advisory
https://support.apple.com/HT211850		x_refsource_MISCRelease NotesVendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner apple

Published Oct 16, 2020

Updated Aug 4, 2024

Reserved Mar 2, 2020

Link CVE-2020-9992

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2020-9992

Red Hat

Severity n/a

Public date n/a

Links CVE-2020-9992