Athira Sethu
Kochi, 23 September 2024
A key warning has been issued by the Indian Computer Emergency Response Team, or CERT-In, regarding vulnerabilities that have been discovered in several products related to Apple, including iOS, macOS, and iPadOS.
According to the advisory, these vulnerabilities may be exploited by remote attackers for accessing various devices using malicious code. Affected software versions include all those before iOS 18, iPadOS 17.7, and macOS 14.7, among others.
What the Advisory Says?
CERT-In reported that many vulnerabilities have been found in Apple devices. These can enable a successful attacker to steal sensitive information, create and compile hostile code, circumvent security controls, trigger DoS issues, bypass authentication credentials, elevate their privileges, and carry out spoofing attacks against the compromised system.
Affected Versions:
The vulnerabilities have been scored as high-severity ones. They are affecting more than one of the Apple software packages:
- iOS: Before versions 18 and 17.7
- iPadOS: Prior to Versions 18 and 17.7
- macOS:
Sonoma prior to Version 14.7
Ventura prior to Version 13.7
Sequoia prior to Version 15
- tvOS: Prior to Versions 18
- watchOS: Prior to Versions 11
- Safari: Prior to Versions 18
- Xcode: Prior to Versions 16
- visionOS: Prior to Versions 2
Recommended steps for users:
CERT-In of the Ministry of Electronics and Information Technology has advised Apple users to update their newest software versions installed on various appliances from the company. The company has already released iOS 18 and iPadOS 18 for its eligible devices.
Keeping their devices updated will protect them against possible future attacks that exploit these vulnerabilities.
By the way, last month CERT-In had issued a warning regarding vulnerabilities in the Google Chrome browser. It also said that people must regularly update all software to ensure security.