An authorization issue was addressed with improved state management. This issue is fixed in iPadOS 17.7.5, iOS 18.3.1 and iPadOS 18.3.1. A physical attack may disable USB Restricted Mode on a locked device. Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals.
References
| Link | Resource |
|---|---|
| http://seclists.org/fulldisclosure/2025/Feb/7 | Mailing List Third Party Advisory |
| http://seclists.org/fulldisclosure/2025/Feb/8 | Mailing List Third Party Advisory |
| https://support.apple.com/en-us/122173 | Release Notes Vendor Advisory |
| https://support.apple.com/en-us/122174 | Release Notes Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
13 Feb 2025, 16:24
| Type | Values Removed | Values Added |
|---|---|---|
| References | () http://seclists.org/fulldisclosure/2025/Feb/8 - Mailing List, Third Party Advisory | |
| References | () https://support.apple.com/en-us/122174 - Release Notes, Vendor Advisory | |
| References | () https://support.apple.com/en-us/122173 - Release Notes, Vendor Advisory | |
| References | () http://seclists.org/fulldisclosure/2025/Feb/7 - Mailing List, Third Party Advisory | |
| CPE | cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:* cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:* |
|
| CWE | CWE-863 | |
| First Time |
Apple ipados
Apple Apple iphone Os |
|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 6.1 |
11 Feb 2025, 06:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-02-10 19:15
Updated : 2025-04-02 20:33
NVD link : CVE-2025-24200
Mitre link : CVE-2025-24200
JSON object : View
Products Affected
apple
- ipados
- iphone_os
CWE
CWE-863
Incorrect Authorization