CVE-2024-54556
📋 TL;DR
This vulnerability allows a user to view restricted content from the lock screen on Apple iOS and iPadOS devices due to improper state management. It affects users running vulnerable versions of iOS/iPadOS before 18.1. The issue enables unauthorized access to content that should be protected when the device is locked.
💻 Affected Systems
- iPhone
- iPad
📦 What is this software?
Ipados by Apple
⚠️ Risk & Real-World Impact
Worst Case
An attacker with physical access to a locked device could view sensitive personal or organizational data that should be protected by lock screen security.
Likely Case
Someone with brief physical access to a device (colleague, family member) could view notifications, messages, or app content that appears on the lock screen.
If Mitigated
With proper device passcodes and attention to physical security, the impact is limited to viewing only content that appears on the lock screen interface.
🎯 Exploit Status
Exploitation requires physical access to the device but no authentication. The exact method is not publicly documented.
🛠️ Fix & Mitigation
✅ Official Fix
Patch Version: iOS 18.1, iPadOS 18.1
Vendor Advisory: https://support.apple.com/en-us/121563
Restart Required: Yes
Instructions:
1. Open Settings app. 2. Tap General. 3. Tap Software Update. 4. Download and install iOS/iPadOS 18.1 update. 5. Device will restart automatically.
🔧 Temporary Workarounds
Disable Lock Screen Notifications
allPrevent sensitive content from appearing on lock screen by disabling notifications
Enable Stronger Lock Screen Settings
allConfigure device to hide notification content on lock screen
🧯 If You Can't Patch
- Implement strict physical security controls for mobile devices
- Configure devices to hide sensitive notification content on lock screen
🔍 How to Verify
Check if Vulnerable:
Check iOS/iPadOS version in Settings > General > About > Software Version. If version is earlier than 18.1, device is vulnerable.Check Version:
Not applicable - check via device Settings interfaceVerify Fix Applied:
Verify iOS/iPadOS version is 18.1 or later in Settings > General > About > Software Version.📡 Detection & Monitoring
Log Indicators:
- No specific log indicators for this vulnerability
Network Indicators:
- No network indicators - local physical access required
SIEM Query:
Not applicable for this local physical access vulnerability