CyberRota Analysis
AI-GeneratedVersions of Fleet prior to 4.87.0 are susceptible to an authentication bypass vulnerability in the device API, allowing unauthenticated attackers to exploit non-secret identifiers such as hostnames and hardware serials. This flaw enables attackers to impersonate iOS/iPadOS devices, potentially leading to unauthorized access to device data and the ability to initiate critical actions like software installations and MDM migrations. Organizations using affected Fleet versions should prioritize patching to mitigate the risk of exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Fleet versions before 4.87.0 contain an authentication bypass vulnerability in the device API that accepts hostnames and hardware serials as authentication tokens in addition to device UUIDs. Unauthenticated attackers who know or guess these non-secret identifiers can authenticate as iOS/iPadOS hosts to read device data and trigger device-scoped actions including software installation and MDM migration.