High Threat Security Alert (A21-09-21): Multiple Vulnerabilities in Apple iOS and iPadOS

Description:

Apple has released iOS 12.5.5 to fix the vulnerabilities in various Apple devices. The list of vulnerability information can be found at:

https://support.apple.com/en-us/HT212824

Reports indicate that the vulnerabilities (CVE-2021-30858, CVE-2021-30860 and CVE-2021-30869) are being exploited in the wild. Users are advised to take immediate action to patch the affected systems to mitigate the elevated risk of cyber attacks.

Affected Systems:

• iPhone 5s, 6, 6 Plus
• iPad Air, mini 2 and mini 3
• iPod touch (6th generation)

Impact:

A successful exploitation could lead to arbitrary code execution on an affected device.

Recommendation:

Apple has released new version of iOS and iPadOS to address the issue.

The updates can be obtained through the auto-update mechanism. Users of affected systems should follow the recommendations provided by the product vendor and take immediate actions to mitigate the risk.

More Information:

• https://support.apple.com/en-us/HT212824
• https://www.hkcert.org/security-bulletin/apple-products-multiple-vulnerabilities_20210924
• https://us-cert.cisa.gov/ncas/current-activity/2021/09/23/apple-releases-security-updates
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-30858
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-30860
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-30869