Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
2.4
CVE-2024-0230: A session management issue was addressed with improved checks. This issue is fixed in Magic Keyboard Firmware Update 2.0.6. An attacker with physical access to the accessory may be able to extract ...
CVE-2024-0230 · published 2 years ago
Summary
A session management issue was addressed with improved checks. This issue is fixed in Magic Keyboard Firmware Update 2.0.6. An attacker with physical access to the accessory may be able to extract its Bluetooth pairing key and monitor Bluetooth traffic.
What to do
- Update apple magic_keyboard_firmware to version 2.0.6 or later.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| apple | magic_keyboard_firmware |
< 2.0.6 cpe:2.3:o:apple:magic_keyboard_firmware:*:*:*:*:*:*:*:* |
Original advisory text
A session management issue was addressed with improved checks. This issue is fixed in Magic Keyboard Firmware Update 2.0.6. An attacker with physical access to the accessory may be able to extract ...
A session management issue was addressed with improved checks. This issue is fixed in Magic Keyboard Firmware Update 2.0.6. An attacker with physical access to the accessory may be able to extract its Bluetooth pairing key and monitor Bluetooth traffic.
References
- https://support.apple.com/en-us/120303
- https://support.apple.com/en-us/HT214050 Release Notes Third Party Advisory
- https://support.apple.com/kb/HT214050
Internet-facing
60 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit
- Gives an attacker partial control
Timeline
Published12 Jan 2024
Updated4 Nov 2026
First seen29 Sep 2026
Sources
CVE-2024-0230 · NVD
Track software like this
Free during beta