CVE-2024-0230

Published: Jan 12, 2024Modified: Jun 17, 2026

2.4

Vector

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Exploitability: 0.9 / Impact: 1.4

Source: NVD

Description

A session management issue was addressed with improved checks. This issue is fixed in Magic Keyboard Firmware Update 2.0.6. An attacker with physical access to the accessory may be able to extract its Bluetooth pairing key and monitor Bluetooth traffic.

Affected (1)

Products: Apple: Magic Keyboard Firmware

1 product

Magic Keyboard Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Apple Magic Keyboard Firmware	Before 2.0.6

Running on/with	Platform Versions
Apple Magic Keyboard	All versions

References (3)

https://support.apple.com/en-us/120303

Source: product-security@apple.com

https://support.apple.com/en-us/HT214050

Source: af854a3a-2127-422b-91ae-364da2661108

Release NotesThird Party Advisory

https://support.apple.com/kb/HT214050

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.