Vulnerabilities in a series of Apple USB-C devices

The issue was discovered by security researcher Thomas Roth when he successfully hacked Apple's proprietary ACE3 USB-C controller, which plays a key role in managing charging and data transfer on Apple's latest devices.

Information about this attack was first revealed at the 38th Chaos Communication Congress in late December last year, but the specific details have only recently been released. The incident has highlighted vulnerabilities in Apple's USB-C implementation, raising concerns about user data security and device integrity.

Apple started implementing USB-C on iPhone since iPhone 15 series

In a technical presentation, Roth described his method, which involved reverse engineering the ACE3 controller to expose its firmware and communications protocols. After exploiting these weaknesses, he reprogrammed the controller, allowing him to perform unauthorized actions such as bypassing security checks and injecting malicious commands.

Apple fails to provide enough protection for users

The vulnerability Roth exploited stems from Apple’s failure to implement sufficient protections in the controller’s firmware. This allows an attacker to gain low-level access via a specially crafted USB-C cable or device. Once compromised, the controller can be manipulated to emulate trusted accessories or perform actions without the user’s consent.

According to Cyber ​​Security News , the attack is significant for device security because ACE3's integration with internal systems could lead to unfettered jailbreaks or firmware implants that compromise the main operating system. Malicious actors could exploit these vulnerabilities to gain unauthorized access to sensitive data or take control of devices.

The good news is that Apple users don't need to worry too much, as the details of the attack have only just been revealed and the process is quite complex. However, hackers will find ways to exploit this method over time. Users are advised to be cautious for now, while Apple has not yet issued a specific statement or timeline for fixing the ACE3 controller bug.

Source: https://thanhnien.vn/lo-hong-trong-hang-loat-thiet-bi-usb-c-cua-apple-185250114091100872.htm