VDB
CVE-2019-8854
CVE-2019-8854
PUBLISHED
CVSS 7.5 HIGH
A user privacy issue was addressed by removing the broadcast MAC address. This issue is fixed in macOS Catalina 10.15, watchOS 6, iOS 13, tvOS 13. A device may be passively tracked by its Wi-Fi MAC address.
EPSS 1.17% · 66.2th percentile
Risk Scores
CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
EPSS Score
1.17%
66.2th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Apple | iOS | unspecified |
| apple | watchos | 0 |
| Apple | tvOS | unspecified |
| Apple | macOS | unspecified |
| Apple | watchOS | unspecified |
| apple | iphone_os | 0 |
| apple | mac_os_x | 0 |
| apple | tvos | 0 |
Timeline
- Oct 27, 2020 CVE Published
- Apr 14, 2021 EPSS Score
- Jun 23, 2021 EPSS Score
- Aug 25, 2021 EPSS Score
- Oct 27, 2021 EPSS Score
- Dec 29, 2021 EPSS Score
- Mar 3, 2022 EPSS Score
- May 5, 2022 EPSS Score
- Jul 7, 2022 EPSS Score
- Sep 9, 2022 EPSS Score
- Nov 11, 2022 EPSS Score
- Jan 13, 2023 EPSS Score