CVEvulnerability

CVE-2023-27964

5.4 MEDIUM Published 2023-06-23 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2023-06-23
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
5.4 MEDIUM — CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
Weaknesses
CWE-290

Description

An authentication issue was addressed with improved state management. This issue is fixed in AirPods Firmware Update 5E133. When your headphones are seeking a connection request to one of your previously paired devices, an attacker in Bluetooth range might be able to spoof the intended source device and gain access to your headphones.

Affected configurations

• apple airpods firmware 5e133

Related

Weakness · CWE (1)

  • CWE-290 Authentication Bypass by Spoofing weakness

References