216.73.216.86

CVE-2025-24206

· Published 29/04/2025 03:15 · Modified 29/04/2025 20:10

Labels: CVE-2025-24206 2025-04-29CVE-2025-24206CWE-863[email protected]

Essential information

Published
29/04/2025 03:15
Modified
29/04/2025 20:10
Author
—
Creator
—
CVSS
7.7 HIGH (v3.1)
CISA KEV
No
CWE
—
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

CVSS metrics

Description

An authentication issue was addressed with improved state management. This issue is fixed in macOS Sequoia 15.4, tvOS 18.4, macOS Ventura 13.7.5, iPadOS 17.7.6, macOS Sonoma 14.7.5, iOS 18.4 and iPadOS 18.4, visionOS 2.4. An attacker on the local network may be able to bypass authentication policy.

NVD status

Status
Analyzed — CVE has been recently published to the CVE List and has been received by the NVD.
Source
[email protected]
NVD
View on NVD

Affected products (CPE)

ProductCPE
apple / ipados cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*
apple / ipados cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*
apple / iphone os cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
apple / macos cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*
apple / macos cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*
apple / macos cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*
apple / tvos cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*
apple / visionos cpe:2.3:o:apple:visionos:*:*:*:*:*:*:*:*

References