CVE-2024-0230
Low
Description
A session management issue was addressed with improved checks. This issue is fixed in Magic Keyboard Firmware Update 2.0.6. An attacker with physical access to the accessory may be able to extract its Bluetooth pairing key and monitor Bluetooth traffic.
SeverityLow
CVSS2.4
Exploit probability—
Product
Apple Magic Keyboard Firmware
PublishedJan 12, 2024
First seenJan 12, 2024
How to fix
Update
- apple magic_keyboard_firmware2.0.6 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| apple magic_keyboard_firmware | v < 2.0.6 | 2.0.6 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.