CVE-2017-6988 — Vulnetix

Try Vulnetix Request Demo

CVE-2017-6988 PUBLISHED CVSS 5.900000095367432 MEDIUM

An issue was discovered in certain Apple products. macOS before 10.12.5 is affected. The issue involves the "802.1X" component. It allows remote attackers to discover the network credentials of arbitrary users by operating a crafted network that requires 802.1X authentication, because EAP-TLS certificate validation mishandles certificate changes.

EPSS 0.16% · 37.1th percentile

Risk Scores

CVSS v3.0

5.900000095367432

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS Score

0.16%

37.1th percentile

Affected Products

Vendor	Product	Versions
apple	mac_os_x	0
n/a	n/a	n/a

Timeline

May 16, 2017 CVE Published
Apr 14, 2021 EPSS Score
Jun 22, 2021 EPSS Score
Aug 23, 2021 EPSS Score
Oct 24, 2021 EPSS Score
Dec 25, 2021 EPSS Score
Feb 4, 2022 EPSS Score
Feb 25, 2022 EPSS Score
Apr 28, 2022 EPSS Score
Aug 31, 2022 EPSS Score
Nov 1, 2022 EPSS Score
Jan 2, 2023 EPSS Score

References

https://support.apple.com/en-us/HT207801 advisory
https://support.apple.com/en-us/HT207800 advisory
https://support.apple.com/en-us/HT207805 advisory
https://support.apple.com/en-us/HT207798 advisory
https://support.apple.com/en-us/HT207804 advisory
https://support.apple.com/en-us/HT207797 advisory
https://support.apple.com/en-us/HT207803 advisory
1038484 vdb
https://support.apple.com/HT207797 url
https://nvd.nist.gov/vuln/detail/CVE-2017-6988 advisory

Open in Interactive Console →