First published: Tue Sep 12 2017(Updated: )
Bluetooth. An input validation issue existed in Bluetooth. This issue was addressed with improved input validation.
Credit: cve@mitre.org Ben Seri Gregory Vishnepolsky Armis
Affected Software | Affected Version | How to fix |
---|---|---|
Apple iPhone OS | =7.0 | |
Apple iPhone OS | =7.0.1 | |
Apple iPhone OS | =7.0.2 | |
Apple iPhone OS | =7.0.3 | |
Apple iPhone OS | =7.0.4 | |
Apple iPhone OS | =7.0.5 | |
Apple iPhone OS | =7.0.6 | |
Apple iPhone OS | =7.1 | |
Apple iPhone OS | =7.1.1 | |
Apple iPhone OS | =7.1.2 | |
Apple iPhone OS | =8.0 | |
Apple iPhone OS | =8.0.1 | |
Apple iPhone OS | =8.0.2 | |
Apple iPhone OS | =8.1 | |
Apple iPhone OS | =8.1.2 | |
Apple iPhone OS | =8.1.3 | |
Apple iPhone OS | =8.2 | |
Apple iPhone OS | =8.4.1 | |
Apple iPhone OS | =9.0 | |
Apple iPhone OS | =9.0.1 | |
Apple iPhone OS | =9.0.2 | |
Apple iPhone OS | =9.1 | |
Apple iPhone OS | =9.2 | |
Apple iPhone OS | =9.2.1 | |
Apple iPhone OS | =9.3 | |
Apple iPhone OS | =9.3.1 | |
Apple iPhone OS | =9.3.2 | |
Apple iPhone OS | =9.3.3 | |
Apple iPhone OS | =9.3.4 | |
Apple iPhone OS | =9.3.5 | |
Apple TV | <7.3 | 7.3 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
(Found alongside the following vulnerabilities)
CVE-2017-14315 is considered a high-severity vulnerability due to its potential for remote exploitation via Bluetooth.
To mitigate CVE-2017-14315, update your affected Apple iOS devices to at least version 7.3 or later.
CVE-2017-14315 affects Apple iOS versions ranging from 7.0 to 9.3.5.
CVE-2017-14315 is an input validation issue in the Bluetooth protocol that can lead to potential remote code execution.
Yes, CVE-2017-14315 can be exploited remotely by sending specially crafted Bluetooth audio commands to targeted devices.