CVE-2021-30763

EUVD-2021-17680 · Published Sep 8, 2021

An input validation issue was addressed with improved input validation. This issue is fixed in iOS 14.7, watchOS 7.6. A shortcut may be able to bypass Internet permission requirements.

Technologies

Apple WatchosApple IpadosApple Iphone Os

Weaknesses

CWE-20

CVSS scores

v3.15.5CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
v2.04.3AV:N/AC:M/Au:N/C:N/I:P/A:N

MITRE ATT&CK

Inferred

Where this vulnerability fits in an attack

ReconImpact

Initial Access

T1190Exploit Public-Facing Application

References

https://support.apple.com/en-us/HT212601
https://support.apple.com/en-us/HT212605

Potentially impacted assets

See if this affects your attack surface