CVE-2023-40418

Summary

An authentication issue was addressed with improved state management. This issue is fixed in watchOS 10. An Apple Watch Ultra may not lock when using the Depth app.

Affected Software

Weaknesses

• An Apple Watch Ultra may not lock when using the Depth app

ADP Enrichment

CVE Program Container

Additional References

• https://support.apple.com/en-us/HT213937
• http://seclists.org/fulldisclosure/2023/Oct/9
• https://support.apple.com/kb/HT213937

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: no
  • Technical Impact: partial

References

• https://support.apple.com/en-us/HT213937
• http://seclists.org/fulldisclosure/2023/Oct/9

• ←Previous
• Next→