Apple Fixes iOS 11.2 HomeKit Flaw; Allowed Unauthorized Remote Access to Homes

HomeKit

9to5Mac believes their learning of the vulnerability has resulted in Apple providing a fix earlier than it would have otherwise.

The unauthorized access suggests a significant security vulnerability that was allowed to slip through the cracks by Apple's development team. Getting that functionality back will require updating to the latest version of iOS.

Details on how the vulnerability can be exploited were not released as the bug is still potentially exploitable.

The issue was with the HomeKit framework and not individual smart home products.

Irrfan Khan gets special award at Dubai International Film Festival
Read : You can get your hands on Meghan Markle's style right here in Dubai ... Read : So many A-listers jetted into Dubai for this super-luxe party ...

The vulnerability has not been described and has been patched via a server-side update which also disables sharing access keys with others (leaving me to assume that this is where the hole is), but it does make for a rather torrid series of security bad news for the Cupertino company.

The iPhone maker said in a statement, "The issue affecting HomeKit users running iOS 11.2 has been fixed". Apple has already fixed the issue on its end, and next week users can get a software update that fixes the bug on their end. Just be sure to install the iOS update when it's released in order to regain the reduced functionality.

Apple is reportedly rolling out a server-side fix for a critical, zero-day HomeKit vulnerability in iOS 11.2 that allowed unauthorized access to smart devices and accessories. Apple was apparently informed about this and related vulnerabilities in late October; however, not all issues were fixed by the time iOS 11.2 and watchOS 4.2 were released.

The existence of the vulnerability isn't necessarily damning for HomeKit as a product, but it does raise questions for users as to how much they should trust to the application.

Related news:

Hot News

Brandywine Realty Trust (BDN) Given Daily Media Impact Rating of 0.32
Dec 08, 2017 - 04:46
The firm owned 1,543,242 shares of the real estate investment trust's stock after selling 70,702 shares during the period. The investor is now holding $14.37 million shares due in part to a decrease of 313377 new shares in their portfolio.

Johnson & Johnson (JNJ) Shares Bought by IFM Investors Pty Ltd
Dec 08, 2017 - 04:45
Pathstone Family Office Limited Liability Corp stated it has 0.23% of its portfolio in Johnson & Johnson (NYSE:JNJ). (NYSE:SOR). Hexavest Inc decreased its stake in Johnson & Johnson (JNJ) by 2.96% based on its latest 2017Q2 regulatory filing with the SEC.

isis-killer-beheading-video-story-top Wildfires destroy at least 30 homes in Los Angeles County
Dec 08, 2017 - 04:44
Los Angeles Mayor Eric Garcetti declared a state of emergency while 11 Los Angeles Unified schools canceled Wednesday classes. Forecasters are calling for another afternoon of gusty winds, which will help fuel the fires on Wednesday.

isis-killer-beheading-video-story-top Trump's second-in-command Pence 'unwelcome in Palestine': Fatah official
Dec 08, 2017 - 04:43
Fatah has called for protests against the move, while the Hamas terror group has called for a violent uprising, or intifada. At least 31 Palestinians were wounded in clashes in the Gaza Strip and across the occupied West Bank.

isis-killer-beheading-video-story-top Philippe Coutinho Refuses to Rule Out January Move Away From Liverpool
Dec 08, 2017 - 04:30
From where I see it, he is more comfortable inside, but the good thing about this player is that he can play in several positions. Last summer there was a job offer and in the same way that happens with any employee I was interested in it.

isis-killer-beheading-video-story-top Sydney Loofe Photos: Full Story & Must-See Details
Dec 08, 2017 - 04:20
Loofe had gone on a date with a woman she met online, then failed to show up at work the next day at a Menards in Lincoln. They were later taken into custody, though they have not been charged in connection with Loofe's disappearance.

isis-killer-beheading-video-story-top Manchester United best and worst case scenario for Champions League knockout stage
Dec 08, 2017 - 04:12
Paris Saint-Germain won Group B despite losing at Bayern Munich 3-1, the second straight loss for the French league leader. Finalists in 2014 and 2016, Atletico must now accept a spot in the Europa League following a slow start to the season.

isis-killer-beheading-video-story-top US Gun Sales Rose After Sandy Hook Massacre
Dec 08, 2017 - 04:03
There might be other changes in gun education, or state-level gun laws that could make clear connections hard to find. The number of people run through the system increased beyond the standard number after Sandy Hook, they found.

isis-killer-beheading-video-story-top AeroVironment, Inc. (AVAV) Surges to Record High, Is Now Top Performer
Dec 08, 2017 - 04:00
PEAK6 Investments L.P. owned about 0.15% of AeroVironment worth $1,897,000 at the end of the most recent reporting period. Following the completion of the transaction, the chairman now owns 58,138 shares in the company, valued at $3,134,219.58.

isis-killer-beheading-video-story-top Polish finance minister to replace PM Beata Szydlo
Dec 08, 2017 - 03:41
Two bills are set for a final vote in parliament Friday that would give the government greater control of the judicial system. Further changes to the government are due in January, senior party officials added.

What is Suggestion of Analyst about:: Rite Aid Corporation (RAD)
Dec 08, 2017 - 03:38
Vericel Corporation (NASDAQ:VCEL) attracted a lower number of shares in volume with 0.63 million contracts traded on 05-Dec-17. Its minimum price target estimates has been figured out at $2 while the maximum price target forecast is established at $2.5.

Schlumberger Limited. (NYSE:SLB) Stake Increased by South Dakota Investment Council
Dec 08, 2017 - 03:37
It is negative, as 99 investors sold SLB shares while 590 reduced holdings. 91 funds opened positions while 513 raised stakes. On average, equities research analysts anticipate that Schlumberger Limited. will post $1.49 EPS for the current fiscal year.

isis-killer-beheading-video-story-top Enbridge Energy, LP (NYSE:EEP) Position Boosted by Macquarie Group Ltd.
Dec 08, 2017 - 03:35
Atlantic Trust Group Llc acquired 403,750 shares as Enbridge Energy Mgmt L L C Shs Units (EEQ)'s stock declined 4.12%. It also reduced Old Dominion Fght Lines Inc Com (NASDAQ:ODFL) stake by 916,430 shares and now owns 794,768 shares.

isis-killer-beheading-video-story-top Priyank's girlfriend Divya exposes him and Puneesh is happy
Dec 08, 2017 - 03:17
She started off with "Remember Me" but ended up crying in front of him and saying that he has hurt a lot of girls including her. Vikas was visibly trying to influence Hiten, but Hiten was finding it really hard to shrug Hina off, given her dogged pursuit.

Nxp Semiconductors NV (Put) (NXPI) Holding Maintained by Walleye Trading Llc
Dec 08, 2017 - 02:50
The stock of ETFS-E Fund MSCI China A GO ETF (NASDAQ:CASH) has "Buy" rating given on Tuesday, October 13 by Sandler O'Neill. The stock of NXP Semiconductors N.V. (NASDAQ:NXPI) has "Hold" rating given on Wednesday, October 18 by Jefferies.