CVE Catalog

CVE-2017-7110

Critical
Published: Translated: NVD NIST

Summary

An issue was discovered in certain Apple products, including iOS, tvOS, and watchOS, related to the 'Wi-Fi' component. It may allow remote attackers to execute arbitrary code in a privileged context or cause a denial of service through crafted Wi-Fi traffic.

Risk Assessment

Organizations may be exposed to remote attacks that could lead to system compromise or disruption. Specifically, attackers could exploit this vulnerability to introduce malicious code.

Recommendation

It is recommended to update systems to the latest versions of iOS, tvOS, and watchOS to mitigate the risks associated with this vulnerability. Additionally, monitoring Wi-Fi traffic may help in detecting potential attacks.

Original NVD description (English source)

An issue was discovered in certain Apple products. iOS before 11 is affected. tvOS before 11 is affected. watchOS before 4 is affected. The issue involves the "Wi-Fi" component. It might allow remote attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via crafted Wi-Fi traffic.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS