CVE-2023-27964

MEDIUM

AirPods Firmware - Authentication Bypass via Bluetooth Device Spoofing

Title source: llm

Description

An authentication issue was addressed with improved state management. This issue is fixed in AirPods Firmware Update 5E133. When your headphones are seeking a connection request to one of your previously paired devices, an attacker in Bluetooth range might be able to spoof the intended source device and gain access to your headphones.

References (1)

Core 1

Core References

Release Notes, Vendor Advisory

https://support.apple.com/en-us/HT213752

Scores

CVSS v3 5.4

EPSS 0.0418

EPSS Percentile 88.8%

Attack Vector ADJACENT_NETWORK

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

Details

CWE

CWE-290

Status published

Products (1)

apple/airpods_firmware 5e133

Published Jun 23, 2023

Tracked Since Feb 18, 2026