CVE-2023-27964

Published: Jun 23, 2023Modified: Jun 17, 2026

5.4

Vector

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Exploitability: 2.8 / Impact: 2.5

Source: NVD

Description

An authentication issue was addressed with improved state management. This issue is fixed in AirPods Firmware Update 5E133. When your headphones are seeking a connection request to one of your previously paired devices, an attacker in Bluetooth range might be able to spoof the intended source device and gain access to your headphones.

Affected (1)

Products: Apple: Airpods Firmware

1 product

Airpods Firmware

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Apple Airpods Firmware	Version 5e133

Related CWEs

Authentication Bypass by Spoofing

This attack-focused weakness is caused by incorrectly implemented authentication schemes that are subject to spoofing attacks.

References (2)

https://support.apple.com/en-us/HT213752

Source: product-security@apple.com

Release NotesVendor Advisory

https://support.apple.com/en-us/HT213752

Source: af854a3a-2127-422b-91ae-364da2661108

Release NotesVendor Advisory

Timeline

No history available yet.