CVE-2021-30903:A vulnerability in Apple operating systems could allow a local attacker to cause unexpected application termination or execute arbitrary code.

splash
Back

Description Preview

CVE-2021-30903 affects multiple Apple operating systems including iOS, iPadOS, and macOS. The vulnerability could allow a local attacker to cause applications to terminate unexpectedly or execute arbitrary code. Apple addressed this issue by implementing improved checks in their software. The vulnerability has been patched in iOS 14.8.1, iPadOS 14.8.1, iOS 15.1, iPadOS 15.1, and macOS Monterey 12.0.1.

Overview

This vulnerability affects multiple Apple operating systems and could potentially lead to arbitrary code execution by local attackers. While specific details about the vulnerability's technical nature are limited in Apple's disclosure, it appears to be a security check bypass that could lead to application crashes or code execution. The vulnerability requires local access to exploit, which somewhat limits its potential impact compared to remotely exploitable vulnerabilities. However, successful exploitation could still result in significant security compromise of affected systems.

Remediation

To remediate this vulnerability, users should update their Apple devices to the following versions or later:

  • iOS: Update to version 14.8.1 or 15.1 or later
  • iPadOS: Update to version 14.8.1 or 15.1 or later
  • macOS: Update to Monterey 12.0.1 or later

Updates can be installed through the standard software update mechanisms:

  • For iOS/iPadOS: Settings > General > Software Update
  • For macOS: Apple menu > System Preferences > Software Update

It's recommended to back up your data before performing these updates. Organizations should prioritize these updates for all affected systems, especially those containing sensitive information.

References

  1. Apple Security Updates for iOS 14.8.1 and iPadOS 14.8.1: https://support.apple.com/en-us/HT212867
  2. Apple Security Updates for iOS 15.1 and iPadOS 15.1: https://support.apple.com/en-us/HT212868
  3. Apple Security Updates for macOS Monterey 12.0.1: https://support.apple.com/en-us/HT212869
  4. Additional Apple Security Updates:
    • https://support.apple.com/kb/HT212871
    • https://support.apple.com/kb/HT212872
    • https://support.apple.com/kb/HT212874
    • https://support.apple.com/kb/HT212876

Industry ExposureMost to least
This section illustrates the prevalence of a specific Common Vulnerabilities and Exposures (CVE) across various industries based on customer reports. The ranking displays industries from the most to least affected by this particular vulnerability, offering valuable insight into where this CVE has been most frequently observed. This information can help organizations within these sectors prioritize their security efforts, understand their relative risk exposure compared to their peers, and focus remediation strategies where they are most needed. By understanding the industry-specific impact, organizations can make more informed decisions regarding patching, resource allocation, and overall risk management related to this CVE.

  1. Health Care & Social Assistance
    Health Care & Social Assistance
  2. Educational Services
    Educational Services
  3. Arts, Entertainment & Recreation
    Arts, Entertainment & Recreation
  4. Retail Trade
    Retail Trade
  5. Information
    Information
  6. Public Administration
    Public Administration
  7. Wholesale Trade
    Wholesale Trade
  8. Accommodation & Food Services
    Accommodation & Food Services
  9. Administrative, Support, Waste Management & Remediation Services
    Administrative, Support, Waste Management & Remediation Services
  10. Agriculture, Forestry Fishing & Hunting
    Agriculture, Forestry Fishing & Hunting
  11. Construction
    Construction
  12. Finance and Insurance
    Finance and Insurance
  13. Management of Companies & Enterprises
    Management of Companies & Enterprises
  14. Manufacturing
    Manufacturing
  15. Mining
    Mining
  16. Other Services (except Public Administration)
    Other Services (except Public Administration)
  17. Professional, Scientific, & Technical Services
    Professional, Scientific, & Technical Services
  18. Real Estate Rental & Leasing
    Real Estate Rental & Leasing
  19. Transportation & Warehousing
    Transportation & Warehousing
  20. Utilities
    Utilities

Focus on What Matters

  1. See Everything.
  2. Identify True Risk.
  3. Proactively Mitigate Threats.

Let's talk!

background
Armis Vulnerability Intelligence Database