This issue was addressed with improved checks. This issue is fixed in iOS 12.2, macOS Mojave 10.14.4. A malicious application may be able to overwrite arbitrary files.

The version of Apple iOS running on the mobile device is prior to 12.2. It is, therefore, affected by multiple vulnerabilities:

 - An unspecified memory corruption issue could allow an attacker to execute code with kernel privileges. (CVE-2019-8529)

 - An unspecified buffer overflow issues was addressed that could address an attacker to cause unexpected system termination or corrupt kernel memory. (CVE-2019-8527)

 - An unspecified memory corruption issue in an SMS Link could allow an attacker arbitrary execute code. (CVE-2019-8553)

The remote host is running a version of macOS / Mac OS X that is 10.14.x prior to 10.14.4. It is, therefore, affected by multiple vulnerabilities, including:

 - Mounting a maliciously crafted NFS network share may lead to arbitrary code execution with system privileges. (CVE-2019-8508)

 - An application may be able to execute arbitrary code with kernel privileges. (CVE-2019-8529)

 - A malicious application may be able to execute arbitrary code with system privileges (CVE-2019-8549)

The remote host is running macOS 10.13.6 and is missing a security update. It is therefore, affected by multiple vulnerabilities including:

  - An application may be able to execute arbitrary code with kernel     privileges. (CVE-2019-8529)

  - A local user may be able to read kernel memory. (CVE-2019-8504)

  - A malicious application may be able to determine kernel memory     layout. (CVE-2019-6207, CVE-2019-8510)

  - 802.1X
  - DiskArbitration
  - Feedback Assistant
  - IOKit
  - IOKit SCSI
  - Kernel
  - PackageKit
  - Perl
  - Security
  - Time Machine
  - Wi-Fi

The remote host is running Mac OS X 10.12.6 and is missing a security update. It is therefore, affected by multiple vulnerabilities including:

  - A malicious application may be able to execute arbitrary code     with kernel privileges. (CVE-2019-8555)

  - A malicious application may be able to determine kernel memory     layout. (CVE-2019-6207, CVE-2019-8510)

  - A malicious application may be able to read restricted memory.
    (CVE-2019-8520)

  - 802.1X
  - DiskArbitration
  - Feedback Assistant
  - IOKit
  - IOKit SCSI
  - Kernel
  - PackageKit
  - Perl
  - Security
  - Time Machine
  - Wi-Fi

The remote host is running a version of macOS / Mac OS X that is 10.14.x prior to 10.14.4. It is, therefore, affected by multiple vulnerabilities, including:

  - Mounting a maliciously crafted NFS network share may lead to     arbitrary code execution with system privileges. (CVE-2019-8508)

  - An application may be able to execute arbitrary code with kernel     privileges. (CVE-2019-8529)

  - A malicious application may be able to execute arbitrary code     with system privileges (CVE-2019-8549)

The version of Apple iOS running on the mobile device is prior to 12.2. It is, therefore, affected by multiple vulnerabilities:

  - An unspecified memory corruption issue could allow an     attacker to execute code with kernel privileges.
    (CVE-2019-8529)

  - An unspecified buffer overflow issues was addressed     that could address an attacker to cause unexpected     system termination or corrupt kernel memory.
    (CVE-2019-8527)

  - An unspecified memory corruption issue in an SMS Link     could allow an attacker arbitrary execute code.     (CVE-2019-8553)

ID	Name	Product	Family	Severity
700558	Apple iOS < 12.2 Multiple Vulnerabilities (APPLE-SA-2019-3-25-1)	Nessus Network Monitor	Mobile Devices	high
700522	macOS 10.14.x < 10.14.4 Multiple Vulnerabilities	Nessus Network Monitor	Operating System Detection	critical
123130	macOS 10.13.6 Multiple Vulnerabilities (Security Update 2019-002)	Nessus	MacOS X Local Security Checks	critical
123129	macOS and Mac OS X Multiple Vulnerabilities (Security Update 2019-002)	Nessus	MacOS X Local Security Checks	critical
123128	macOS 10.14.x < 10.14.4 Multiple Vulnerabilities	Nessus	MacOS X Local Security Checks	critical
123080	Apple iOS < 12.2 Multiple Vulnerabilities	Nessus	Mobile Devices	critical

Detections

Analytics

CVE-2019-8521

medium

Tenable Plugins

high

critical

critical

critical

critical

critical