CVE-2021-30866

MEDIUM

iPadOS < 15.0 - User Privacy Issue via WiFi MAC Address Tracking

Title source: llm

Description

A user privacy issue was addressed by removing the broadcast MAC address. This issue is fixed in tvOS 15, watchOS 8, iOS 15 and iPadOS 15. A device may be passively tracked by its WiFi MAC address.

References (4)

Core 4

Core References

Vendor Advisory x_refsource_misc

https://support.apple.com/en-us/HT212814

Vendor Advisory x_refsource_misc

https://support.apple.com/en-us/HT212819

Vendor Advisory x_refsource_misc

https://support.apple.com/en-us/HT212815

Vendor Advisory x_refsource_confirm

https://support.apple.com/kb/HT212869

Scores

CVSS v3 6.5

EPSS 0.0052

EPSS Percentile 41.0%

Attack Vector ADJACENT_NETWORK

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Details

Status published

Products (5)

apple/ipados < 15.0

apple/iphone_os < 15.0

apple/macos < 12.0.1

apple/tvos < 15.0

apple/watchos < 8.0

Published Aug 24, 2021

Tracked Since Feb 18, 2026