by Kastro
Paper/Archive/CVE-2024-54492

CVE-2024-54492

Apple iOS and iPadOS — This issue was addressed by using HTTPS when sending information over the network.

EPSS 0.9%CVSS 9.8
critical.is priorityof 100
41
CVSS 9.8 (ADP)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 59.1.591 × 2011.8No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

This issue was addressed by using HTTPS when sending information over the network. This issue is fixed in iOS 18.2 and iPadOS 18.2, iPadOS 17.7.3, macOS Sequoia 15.2, visionOS 2.2. An attacker in a privileged network position may be able to alter network traffic.

Affected

ProductAffectedFixed inSource
iOS and iPadOS< 18.218.2CNA
iPadOS< 17.7.317.7.3CNA
macOS< 15.215.2CNA
visionOS< 2.22.2CNA

Scores by source

CISA ADP9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

refsupport.apple.com/en-us/121837refsupport.apple.com/en-us/121838refsupport.apple.com/en-us/121839refsupport.apple.com/en-us/121845refseclists.org/fulldisclosure/2024/Dec/12refseclists.org/fulldisclosure/2024/Dec/7refseclists.org/fulldisclosure/2024/Dec/6