CVE-2023-40400

This issue was addressed with improved checks

Critical · published September 26, 2023

CVSS v3.1
9.8
EPSS
2%
Percentile
78.8
In the wild
Unconfirmed
What it is

🚨 Just one malicious request could crash your app or even let an attacker run rogue code! 🔥 Think of it like an unexpected power surge that knocks out your computer — without warning, everything comes crashing down! This vulnerability allows a remote user to exploit an oversight in the system, leading to unwanted app terminations or worse. If exploited, this could lead to catastrophic consequences, including unauthorized access to sensitive data, allowing attackers to potentially take full control of the affected device. Imagine your trusty device suddenly becoming a puppet for a malicious user — absolutely devastating!

Put simply

Think of it like an unexpected power surge that knocks out your computer — without warning, everything comes crashing down! This vulnerability allows a remote user to exploit an oversight in the system, leading to unwanted app terminations or worse. This vulnerability exists due to inadequate checks that, when bypassed, allow a remote attacker to trigger arbitrary code execution or cause a termination of the application. It primarily affects devices running older versions of tvOS, iOS, iPadOS, watchOS, and macOS.

What to do

If exploited, this could lead to catastrophic consequences, including unauthorized access to sensitive data, allowing attackers to potentially take full control of the affected device. Imagine your trusty device suddenly becoming a puppet for a malicious user — absolutely devastating! Update your devices to tvOS 17, iOS 17, iPadOS 17, watchOS 10, and macOS Sonoma 14 immediately to patch this flaw. Check your system settings to ensure you're running the latest version, and encourage your users to do the same! You've got this! By taking these quick actions, you can secure your devices and keep those pesky attackers at bay! 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01833 · 78.8th percentile
Published
2023-09-26T20:14Z
EPSS history
Timeline
  • 26 SEP 20:14Z
    This issue was addressed with improved checks
    cvelistv5