CVE-2018-53838.0HighCWE-325

CVE-2018-5383: Bluetooth implementations may not sufficiently validate elliptic curve parameters during Diffie-Hellman key exchange

Apple · macOS

Vendor fix available · Affected: Apple macOS · Exploitation: unlikely (under 1%)

Not in CyberSIXT coverage yet: no article names this CVE. This page shows the public record.

0.8%probability of exploitation in the next 30 days

57th percentile

050100

Higher than 57% of scored CVEs

8.0HighCVSS 3.0

LowMediumHighCrit.

DescriptionCVE.org

Bluetooth firmware or operating system software drivers in macOS versions before 10.13, High Sierra and iOS versions before 11.4, and Android versions before the 2018-06-05 patch may not sufficiently validate elliptic curve parameters used to generate public keys during a Diffie-Hellman key exchange, which may allow a remote attacker to obtain the encryption key used by the device.

Affected products3

From the CVE record. A product or version that is not listed is unknown, not unaffected.

Apple · macOSfrom 10.13 High Sierra before 10.13.6
Apple · iOSfrom 11 before 11.4
Android Open Source Project · Androidbefore 2018-06-05 patch level

On the Atlas

Every published CVE is on the CyberSIXT Atlas, grouped by weakness, vendor and month.

Open the Atlas

Exploitation: Unlikely (under 1%). EPSS under 1%, or no score yet.
CISA KEV: Not listed
Public check: No public nuclei template
Weakness: Missing Cryptographic Step · Cryptography
Vendor: Apple
Published: August 2018
Band: Unlikely (under 1%), August 2018

CoverageNo articles yet

No CyberSIXT article names CVE-2018-5383 yet, so there is no coverage timeline, action brief or change log for it. Everything on this page comes from the public CVE record, CISA KEV, EPSS and the nuclei template index. Search the archive or see the CVEs in the news.