CVE-2024-0230

2.4 lowEPSS 1.2%

Low (2.4) in apple magic keyboard firmware. EPSS 1.2% chance of exploitation in the next 30 days.

A session management issue was addressed with improved checks. This issue is fixed in Magic Keyboard Firmware Update 2.0.6. An attacker with physical access to the accessory may be able to extract its Bluetooth pairing key and monitor Bluetooth traffic.

Severity

CVSS 3.1

2.4 low

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

EPSS: 1.2% chance of exploitation in the next 30 days; higher than 68% of CVEs (scores of 2026-10-31)
Published: 2024-01-12
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

apple:magic_keyboard_firmware

References

https://support.apple.com/en-us/120303
https://support.apple.com/en-us/HT214050
https://support.apple.com/kb/HT214050

Check your stack JSON