CVE-2023-42846

Severity Score

5.3

*CVSS v3.1

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

Attend

*SSVC

Descriptions

This issue was addressed by removing the vulnerable code. This issue is fixed in watchOS 10.1, iOS 16.7.2 and iPadOS 16.7.2, tvOS 17.1, iOS 17.1 and iPadOS 17.1. A device may be passively tracked by its Wi-Fi MAC address.

Este problema se solucionó eliminando el código vulnerable. Este problema se solucionó en watchOS 10.1, iOS 16.7.2 y iPadOS 16.7.2, tvOS 17.1, iOS 17.1 y iPadOS 17.1. Un dispositivo puede ser rastreado pasivamente por su dirección MAC de Wi-Fi.

*Credits: N/A

CVSS Scores

NISTv3.1 5.3

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

Low

Integrity

None

Availability

None

* Common Vulnerability Scoring System

SSVC

Decision:Attend

Exploitation

None

Automatable

Yes

Tech. Impact

Partial

* Organization's Worst-case Scenario

Timeline

2023-09-14 CVE Reserved
2023-10-25 CVE Published
2024-09-11 CVE Updated
2024-10-31 EPSS Updated
---------- Exploited in Wild
---------- KEV Due Date
---------- First Exploit

CWE

CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

CAPEC

References (12)

URL	Tag	Source
http://seclists.org/fulldisclosure/2023/Oct/19	Mailing List
http://seclists.org/fulldisclosure/2023/Oct/22	Mailing List
http://seclists.org/fulldisclosure/2023/Oct/23	Mailing List
http://seclists.org/fulldisclosure/2023/Oct/25	Mailing List

URL	Date	SRC

URL	Date	SRC

URL	Date	SRC
https://support.apple.com/en-us/HT213981	2023-11-02
https://support.apple.com/en-us/HT213982	2023-11-02
https://support.apple.com/en-us/HT213987	2023-11-02
https://support.apple.com/en-us/HT213988	2023-11-02
https://support.apple.com/kb/HT213981	2023-11-02
https://support.apple.com/kb/HT213982	2023-11-02
https://support.apple.com/kb/HT213987	2023-11-02
https://support.apple.com/kb/HT213988	2023-11-02

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Apple Search vendor "Apple"		Ipados Search vendor "Apple" for product "Ipados"				< 16.7.2 Search vendor "Apple" for product "Ipados" and version " < 16.7.2"		-		Affected
Apple Search vendor "Apple"		Ipados Search vendor "Apple" for product "Ipados"				>= 17.0 < 17.1 Search vendor "Apple" for product "Ipados" and version " >= 17.0 < 17.1"		-		Affected
Apple Search vendor "Apple"		Iphone Os Search vendor "Apple" for product "Iphone Os"				< 16.7.2 Search vendor "Apple" for product "Iphone Os" and version " < 16.7.2"		-		Affected
Apple Search vendor "Apple"		Iphone Os Search vendor "Apple" for product "Iphone Os"				>= 17.0 < 17.1 Search vendor "Apple" for product "Iphone Os" and version " >= 17.0 < 17.1"		-		Affected
Apple Search vendor "Apple"		Tvos Search vendor "Apple" for product "Tvos"				< 17.1 Search vendor "Apple" for product "Tvos" and version " < 17.1"		-		Affected
Apple Search vendor "Apple"		Watchos Search vendor "Apple" for product "Watchos"				< 10.1 Search vendor "Apple" for product "Watchos" and version " < 10.1"		-		Affected