2.4low
CVE-2019-8799
This issue was resolved by replacing device names with a random identifier.
Published 6 y ago · modified 4 mo ago · JSON
CVSS
2.4
v3.1 · NVD
CISA KEV
No
not known exploited
EPSS
0.3%
percentile 27%
Public exploits
0
none known
Summary
This issue was resolved by replacing device names with a random identifier. This issue is fixed in iOS 13.1 and iPadOS 13.1, macOS Catalina 10.15, watchOS 6, tvOS 13. An attacker in physical proximity may be able to passively observe device names in AWDL communications.
Exploit prediction (EPSS)
0.34% probability of exploitation in the next 30 days, higher than 27% of all scored CVEs.
CVSS scores
| Assigned by | Version | Score | Vector |
|---|---|---|---|
| NVD | 3.1 | 2.4 | CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N |
| NVD | 2.0 | 2.1 | AV:L/AC:L/Au:N/C:P/I:N/A:N |
Affected products
- Apple iOS and iPadOS
- Apple tvOS
- Apple watchOS
- Apple macOS
References
- support.apple.com /en-us/HT210634 · x_refsource_MISC, x_transferred
- support.apple.com /en-us/HT210604 · x_refsource_MISC, x_transferred
- support.apple.com /en-us/HT210607 · x_refsource_MISC, x_transferred
- support.apple.com /en-us/HT210603 · x_refsource_MISC, x_transferred
Sources
- CVE List: CVE-2019-8799
- NVD: CVE-2019-8799
vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.