Cyber Posture

CVE-2024-44276

High

Published: 17 March 2025

Published
17 March 2025
Modified
28 March 2025
KEV Added
Patch
CVSS Score 7.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N
EPSS Score 0.0006 19.1th percentile
Risk Priority 15 60% EPSS · 20% KEV · 20% CVSS

Description

Adversaries may passively sniff network traffic to capture information about an environment, including authentication material passed over the network.

Security Summary

CVE-2024-44276 is a vulnerability involving the cleartext transmission of sensitive information over the network, classified as CWE-319 (Cleartext Transmission of Sensitive Information). It affects Apple iOS and iPadOS versions prior to 18.2.

The vulnerability has a CVSS v3.1 base score of 7.3 (AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N). A user in a privileged network position can exploit it over the network with low attack complexity, low privileges required, and user interaction, potentially leaking sensitive information with high confidentiality and integrity impacts.

Apple's advisory states that the issue was addressed in iOS 18.2 and iPadOS 18.2 by using HTTPS when sending information over the network. Additional details are available at https://support.apple.com/en-us/121837.

Details

CWE(s)
CWE-319

Affected Products

apple
ipados
≤ 18.2
apple
iphone os
≤ 18.2

MITRE ATT&CK Enterprise Techniques

T1040 Network Sniffing Credential Access
Adversaries may passively sniff network traffic to capture information about an environment, including authentication material passed over the network.
Why these techniques?

The cleartext transmission of sensitive information (CWE-319) directly enables adversaries in a privileged network position to capture data via network sniffing, as the lack of encryption (fixed by HTTPS) makes traffic readable without additional effort.

Confidence: HIGH · MITRE ATT&CK Enterprise v19.0

References