CVE-2024-0230
First published: Tue Jan 09 2024(Updated: )
A session management issue was addressed with improved checks. This issue is fixed in Magic Keyboard Firmware Update 2.0.6. An attacker with physical access to the accessory may be able to extract its Bluetooth pairing key and monitor Bluetooth traffic.
Credit: Marc Newlin SkySafe product-security@apple.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Apple Magic Keyboard Firmware Update | <2.0.6 | 2.0.6 |
| All of | ||
| Apple Magic Keyboard Firmware | <2.0.6 | |
| Apple Magic Keyboard |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://support.apple.com/en-us/HT214050 (Advisory)
Frequently Asked Questions
What is the severity of CVE-2024-0230?
CVE-2024-0230 is classified as a moderate severity vulnerability due to its potential for physical access exploitation.
How do I fix CVE-2024-0230?
To fix CVE-2024-0230, update to the Magic Keyboard Firmware Update version 2.0.6.
What are the risks associated with CVE-2024-0230?
The risks associated with CVE-2024-0230 include the potential for an attacker with physical access to extract Bluetooth pairing keys and monitor Bluetooth traffic.
Who is affected by CVE-2024-0230?
CVE-2024-0230 affects users of the Apple Magic Keyboard Firmware prior to version 2.0.6.
Is physical access required to exploit CVE-2024-0230?
Yes, physical access to the Magic Keyboard is required to exploit CVE-2024-0230.
- collector/mitre-cve
- source/MITRE
- agent/type
- agent/first-publish-date
- agent/author
- agent/references
- agent/description
- agent/severity
- agent/last-modified-date
- agent/event
- collector/apple-support
- source/Apple
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- collector/epss-latest
- source/FIRST
- agent/epss
- collector/nvd-api
- source/NVD
- agent/softwarecombine
- agent/trending
- agent/tags
- agent/source
- vendor/apple
- canonical/apple magic keyboard firmware update
- canonical/apple magic keyboard firmware
- canonical/apple magic keyboard