CVE-2019-8799

LOW

iPadOS < 13.1 - Unauthenticated Device Name Exposure via AWDL Communications

Title source: llm
STIX 2.1

Description

This issue was resolved by replacing device names with a random identifier. This issue is fixed in iOS 13.1 and iPadOS 13.1, macOS Catalina 10.15, watchOS 6, tvOS 13. An attacker in physical proximity may be able to passively observe device names in AWDL communications.

References (4)

Core 4
Core References
Release Notes, Vendor Advisory x_refsource_misc
https://support.apple.com/en-us/HT210634
Release Notes, Vendor Advisory x_refsource_misc
https://support.apple.com/en-us/HT210604
Release Notes, Vendor Advisory x_refsource_misc
https://support.apple.com/en-us/HT210607
Release Notes, Vendor Advisory x_refsource_misc
https://support.apple.com/en-us/HT210603

Scores

CVSS v3 2.4
EPSS 0.0033
EPSS Percentile 25.6%
Attack Vector PHYSICAL
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Details

Status published
Products (5)
apple/ipados < 13.1
apple/iphone_os < 13.1
apple/mac_os_x < 10.15
apple/tvos < 13.0
apple/watchos < 6.0
Published Oct 27, 2020
Tracked Since Feb 18, 2026