CVE-2023-42855

EUVD-2023-47276
This issue was addressed with improved state management. This issue is fixed in iOS 17.1 and iPadOS 17.1. An attacker with physical access may be able to silently persist an Apple ID on an erased device.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
4.6 MEDIUM
PHYSICAL
LOW
NONE
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
CISA-ADPADP
4.6 MEDIUM
PHYSICAL
LOW
NONE
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 12%
Affected Products (NVD)
VendorProductVersion
appleipad_os
𝑥
< 17.1
appleiphone_os
𝑥
< 17.1
𝑥
= Vulnerable software versions
References
https://support.apple.com/en-us/HT213982
https://support.apple.com/en-us/HT213982
https://support.apple.com/kb/HT213982