CVE-2024-0230

A session management issue was addressed with improved checks

Low · published January 12, 2024

CVSS v3.1
2.4
EPSS
1%
Percentile
68.5
In the wild
Unconfirmed
What it is

A session management issue was addressed with improved checks. This issue is fixed in Magic Keyboard Firmware Update 2.0.6. An attacker with physical access to the accessory may be able to extract its Bluetooth pairing key and monitor Bluetooth traffic.

The record
Technical detail
CVSS v3.1
2.4 · LOW
Vector
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.01223 · 68.5th percentile
Published
2024-01-12T23:10Z
EPSS history
Timeline
  • 12 JAN 23:10Z
    A session management issue was addressed with improved checks
    cvelistv5