High Threat Security Alert (A21-06-08): Multiple Vulnerabilities in Apple iOS and iPadOS

Description:

Apple has released iOS 12.5.4 to fix the vulnerabilities in various Apple devices. The list of vulnerability information can be found at:

https://support.apple.com/en-hk/HT212548

Reports indicate that the vulnerabilities (CVE-2021-30761 and CVE-2021-30762) are being exploited in the wild. Users of affected systems are advised to take immediate action to patch your affected systems to mitigate the elevated risk of cyber attacks.

Affected Systems:

• iPhone 5s, 6, 6 Plus
• iPad Air, mini 2 and mini 3
• iPod touch (6th generation)

Impact:

A successful exploitation could lead to arbitrary code execution on an affected device.

Recommendation:

Apple has released new version of iOS and iPadOS to address the issues:

The updates can be obtained through the auto-update mechanism. Users of affected systems should follow the recommendations provided by the product vendor and take immediate actions to mitigate the risk.

More Information:

• https://support.apple.com/en-hk/HT212548
• https://www.hkcert.org/security-bulletin/apple-ios-multiple-vulnerabilities_20210615
• https://us-cert.cisa.gov/ncas/current-activity/2021/06/15/apple-releases-security-updates-ios-1254
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-30737
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-30761
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-30762