What is CVE-2023-29485?

CVE-2023-29485 is a critical-severity vulnerability in Apple Macos, classified under Missing Authentication for Critical Function. CVSS score: 9.8/10. Published 2023-12-21.

How severe is CVE-2023-29485?

Critical severity. CVSS v3 base score is 9.8 out of 10.

Auth bypass in Apple Macos

CVE-2023-29485

An issue was discovered in Heimdal Thor agent versions 3.4.2 and before on Windows and 2.6.9 and before on macOS, allows attackers to bypass network filtering, execute arbitrary code, and obtain sensitive information via DarkLayer Guard th…

Vulnerability class: Broken Authentication

EPSS: 0.010 (57.1th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 9.8 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.

Affected products

Apple Macos
Heimdalsecurity Thor
Microsoft Windows
N/a — versions n/a

Weakness classification (CWE)

CWE-306 — Missing Authentication for Critical Function

References

cve@mitre.org (Exploit, Third Party Advisory)

Frequently asked questions

What is CVE-2023-29485?: CVE-2023-29485 is a critical-severity vulnerability in Apple Macos, classified under Missing Authentication for Critical Function. CVSS score: 9.8/10. Published 2023-12-21.
How severe is CVE-2023-29485?: Critical severity. CVSS v3 base score is 9.8 out of 10.