CVE-2023-42897

Summary

The issue was addressed with improved checks. This issue is fixed in iOS 17.2 and iPadOS 17.2. An attacker with physical access may be able to use Siri to access sensitive user data.

Affected Software

Weaknesses

• An attacker with physical access may be able to use Siri to access sensitive user data

ADP Enrichment

CVE Program Container

Additional References

• https://support.apple.com/en-us/HT214035
• http://seclists.org/fulldisclosure/2023/Dec/7
• https://support.apple.com/kb/HT214035

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: no
  • Technical Impact: partial

References

• https://support.apple.com/en-us/HT214035
• http://seclists.org/fulldisclosure/2023/Dec/7

• ←Previous
• Next→