CVE no: CVE-2020-3843
Risk level: Critical
Risk: WI-FI Memory Corruption.
vulnerable parties: Users using Apple watch with the following OS version:
- All apple Watch with Apple watch OS up to version 5.3.6
Flaw Description: The issue affects an unknown code of the component Wi-Fi. The manipulation with it can lead to memory corruption vulnerability. The attack can be initiated remotely resulting in successful exploitation.
Recommendations: Apple has released new free software update addressing the issue for the product which the users can download via OTA.
Products vulnerable:
- Apple Watch Series 1
- Apple Watch series 2
- Apple Watch series 3
- Apple Watch series 4
Documentation: For more information visit here: https://support.apple.com/en-us/HT211176