An authorization issue was addressed with improved state management. This issue is fixed in iPadOS 17.7.5, iOS 18.3.1 and iPadOS 18.3.1. A physical attack may disable USB Restricted Mode on a locked device. Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals.
No PoCs from references.
- https://github.com/0xor0ne/awesome-list
- https://github.com/ARPSyndicate/cve-scores
- https://github.com/GhostTroops/TOP
- https://github.com/Jalexander798/JA_Tools-Cybersecurity-Resource-2
- https://github.com/kherrick/lobsters
- https://github.com/kherrick/news-summary
- https://github.com/nomi-sec/PoC-in-GitHub
- https://github.com/packetinside/CISA_BOT
- https://github.com/perplext/AmpSwiftUI
- https://github.com/s3rg0x/ipswdiff-sonar
- https://github.com/ums91/CISA_BOT
- https://github.com/xairy/usb-hacking