CVE-2020-11024CWE-300

Man-in-the-middle attack in Moonlight iOS/tvOS

Medium · published April 29, 2020

CVSS v3.1
6.1
EPSS
1%
Percentile
56.2
In the wild
Unconfirmed
What it is

In Moonlight iOS/tvOS before 4.0.1, the pairing process is vulnerable to a man-in-the-middle attack. The bug has been fixed in Moonlight v4.0.1 for iOS and tvOS.

The record
Technical detail
CVSS v3.1
6.1 · MEDIUM
Vector
CVSS:3.1/AV:P/AC:H/PR:L/UI:R/S:C/C:H/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00802 · 56.2th percentile
Weakness
CWE-300 · Channel Accessible by Non-Endpoint
Published
2020-04-29T20:55Z
EPSS history
Timeline
  • 29 APR 20:55Z
    Man-in-the-middle attack in Moonlight iOS/tvOS
    cvelistv5