CVE-2020-9839

EPSS 3.7%

Vexday Risk Score

18Bajo

Decisión SSVC (CISA)

Attend

PoC disponible → seguir de cerca

CVSS —EPSS 3.7%KEV nãoPoC —Nuclei —Metasploit simPatch —

Ciclo de vida

18 mar 2020Exploit Metasploit disponible

09 jun 2020Publicada en NVD

Recomendación: Planificar corrección próxima — ya existe PoC pública.

A race condition was addressed with improved state handling. This issue is fixed in iOS 13.5 and iPadOS 13.5, macOS Catalina 10.15.5, tvOS 13.4.5, watchOS 6.2.5. An application may be able to gain elevated privileges.

Productos afectados

Apple · iOS Apple · macOS Apple · tvOS Apple · watchOS

¿Quieres saber si tu infraestructura está expuesta a esto?

Hablar con TrueHacking →

Referencias

https://support.apple.com/HT211168 https://support.apple.com/HT211170 https://support.apple.com/HT211171 https://support.apple.com/HT211175