CVE-2024-23293 - This issue was addressed through improved state management

Back Back to CVE browser

MEDIUM

This issue was addressed through improved state management

Published Mar 8, 2024

4.6

MEDIUM

CVSS 3.1

EPSS 0.41%

Description

This issue was addressed through improved state management. This issue is fixed in iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4, tvOS 17.4, watchOS 10.4. An attacker with physical access may be able to use Siri to access sensitive user data.

Affected products

Vendor Apple Product iOS and iPadOS Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <17.4
Vendor Apple Product macOS Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <14.4
Vendor Apple Product tvOS Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <17.4
Vendor Apple Product watchOS Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <10.4

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Apple

iOS and iPadOS

n/a

Version	Status	Constraints
0	affected	<17.4

Apple

macOS

n/a

Version	Status	Constraints
0	affected	<14.4

Apple

tvOS

n/a

Version	Status	Constraints
0	affected	<17.4

Apple

watchOS

n/a

Version	Status	Constraints
0	affected	<10.4

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (16)

http://seclists.org/fulldisclosure/2024/Mar/21
Mailing List
http://seclists.org/fulldisclosure/2024/Mar/24
Mailing List
http://seclists.org/fulldisclosure/2024/Mar/25
Mailing List
https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-20812
Advisory
https://support.apple.com/en-us/120881
https://support.apple.com/en-us/120882
https://support.apple.com/en-us/120893
https://support.apple.com/en-us/120895
https://support.apple.com/en-us/HT214081
Vendor Advisory
https://support.apple.com/en-us/HT214084
Vendor Advisory
https://support.apple.com/en-us/HT214086
Vendor Advisory
https://support.apple.com/en-us/HT214088
Vendor Advisory
https://support.apple.com/kb/HT214081
https://support.apple.com/kb/HT214084
https://support.apple.com/kb/HT214086
https://support.apple.com/kb/HT214088

Link	Providers	Tags
http://seclists.org/fulldisclosure/2024/Mar/21		Mailing List
http://seclists.org/fulldisclosure/2024/Mar/24		Mailing List
http://seclists.org/fulldisclosure/2024/Mar/25		Mailing List
https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-20812		Advisory
https://support.apple.com/en-us/120881
https://support.apple.com/en-us/120882
https://support.apple.com/en-us/120893
https://support.apple.com/en-us/120895
https://support.apple.com/en-us/HT214081		Vendor Advisory
https://support.apple.com/en-us/HT214084		Vendor Advisory
https://support.apple.com/en-us/HT214086		Vendor Advisory
https://support.apple.com/en-us/HT214088		Vendor Advisory
https://support.apple.com/kb/HT214081
https://support.apple.com/kb/HT214084
https://support.apple.com/kb/HT214086
https://support.apple.com/kb/HT214088