CISA Adds Apple Improper Authentication Vulnerability to KEV Catalog
Original title: CISA Adds One Known Exploited Vulnerability to Catalog
CISA added CVE-2024-27834, an Apple Multiple Products Improper Authentication Vulnerability, to its KEV Catalog due to active exploitation.
CISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. The vulnerability is CVE-2024-27834 affecting Apple Multiple Products with Improper Authentication. This type of vulnerability is a frequent attack vector for malicious cyber actors and poses significant risks to the federal enterprise. Binding Operational Directive (BOD) 26-04 requires federal agencies to prioritize rapid remediation of high-risk vulnerabilities, specifically those identified by CISA’s KEV Catalog. While BOD 26-04 applies only to FCEB agencies, CISA encourages all organizations to adopt risk-based vulnerability management and prioritize remediation of KEV Catalog vulnerabilities.
Impact: Unauthenticated access to multiple Apple products
- 1.Prioritize rapid remediation of KEV Catalog vulnerabilities for FCEB agencies
- 2.Check whether threat actors compromised the system before the patch was applied
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2024-27834 | Improper Authentication in Apple Products Bypassing Pointer Authentication | 5.5 | 2% | KEV | KEV |
From the original article
1 min read at cisa.govCISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. CVE-2024-27834 Apple Multiple Products Improper Authentication Vulnerability This type of vulnerability is a frequent attack vector for malicious cyber actors and poses significant risks to the federal enterprise.
By CISA · cisa.gov
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.