CVE-2019-8900

Summary

CVE-2019-8900 is a vulnerability affecting the SecureROM of certain Apple devices. This issue enables an unauthenticated local attacker to execute arbitrary code upon booting the device by exploiting it while the device is in Device Firmware Update (DFU) mode and connected to a computer. The exploit does not provide persistent access, meaning rebooting the device terminates the attack. Access to the device's unlock PIN or fingerprint is necessary to bypass Apple's Secure Enclave or Touch ID features, so the vulnerability does not directly compromise protected information.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.