CVEvulnerability
CVE-2023-42897
4.6 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2023-12-12
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 4.6 MEDIUM — CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Description
The issue was addressed with improved checks. This issue is fixed in iOS 17.2 and iPadOS 17.2. An attacker with physical access may be able to use Siri to access sensitive user data.
Affected configurations
• apple ipados (>= 17.0 < 17.2)
• apple iphone os (>= 17.0 < 17.2)
References
- http://seclists.org/fulldisclosure/2023/Dec/7 Third Party Advisory
- https://support.apple.com/en-us/HT214035 Release Notes, Vendor Advisory
- http://seclists.org/fulldisclosure/2023/Dec/7 Third Party Advisory
- https://support.apple.com/en-us/HT214035 Release Notes, Vendor Advisory
- https://support.apple.com/kb/HT214035 support.apple.com