CVE-2020-6812

The first time AirPods are connected to an iPhone, they become named after the user's name by default (e.g

published March 25, 2020

CVSS
—
EPSS
2%
Percentile
75.6
In the wild
Unconfirmed
What it is

The first time AirPods are connected to an iPhone, they become named after the user's name by default (e.g. Jane Doe's AirPods.) Websites with camera or microphone permission are able to enumerate device names, disclosing the user's name. To resolve this issue, Firefox added a special case that renames devices containing the substring 'AirPods' to simply 'AirPods'. This vulnerability affects Thunderbird < 68.6, Firefox < 74, Firefox < ESR68.6, and Firefox ESR < 68.6.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01601 · 75.6th percentile
Published
2020-03-25T21:12Z
EPSS history
Timeline
  • 25 MAR 21:12Z
    The first time AirPods are connected to an iPhone, they become named after the user's name by default (e.g
    cvelistv5