Hardware Vulnerability in iPhones and Apple Watches Allows Low-Level Code Execution
A new exploit named Usbliter8 targets Apple's SecureROM in iPhones with A12 and A13 chips and Apple Watches with S4 and S5 chips. This hardware vulnerability allows attackers to execute arbitrary code at the device's lowest level, bypassing signature checks and potentially compromising system security. While user data remains protected by the Secure Enclave Processor, the exploit is significant for forensics applications. Apple has fixed this issue in newer devices but acknowledges the importance of such research.
Summary
European cybersecurity firm Paradigm Shift disclosed a BootROM exploit named Usbliter8 that affects millions of iPhones and Apple Watches with specific chipsets. The exploit leverages a USB controller bug and firmware configuration weakness, requiring physical access to execute. It allows attackers to bypass security checks and run unsigned code before the OS loads, similar to the Checkm8 exploit from 2019. Although user data remains secure due to the Secure Enclave Processor, the vulnerability poses significant risks for device integrity.
What Happened
Usbliter8 exploits a hardware flaw in Apple's SecureROM, which is integral to the secure boot process of affected devices. By chaining a USB controller bug with a firmware configuration weakness, attackers can execute arbitrary code at the lowest level of the device. This exploit requires physical access via a USB connection and involves sending crafted packets to trigger an out-of-bounds write in memory.
The attack bypasses Apple's signature checks, allowing unsigned firmware execution and privilege escalation. Although it cannot directly access user data due to the Secure Enclave Processor's protection, it opens potential vectors for compromising system security. The exploit is similar to Checkm8, which left older iPhones permanently vulnerable to jailbreaking.
Technical Details
Usbliter8 targets devices with A12 and A13 chips (iPhone XS, XR, 11) and S4/S5 chips in Apple Watches. It requires a special USB device, like a Raspberry Pi Pico 2, to connect to the iPhone and send crafted USB setup packets. This triggers an out-of-bounds write, allowing attackers to overwrite critical memory data, control the processor, and execute arbitrary code with full system privileges.
The exploit bypasses Apple's signature checks, enabling unsigned firmware loading or lowering device security levels. While user data remains protected by the Secure Enclave Processor, the vulnerability can compromise device integrity and potentially aid forensic investigations.
Affected Products and Fixed Versions
Usbliter8 affects iPhones with A12 and A13 chips and Apple Watches with S4 and S5 chips, released in 2018 and 2019. Devices with A14/S6 or newer chips are not vulnerable. Apple has fixed this issue in its newer devices, ensuring that user data remains protected by the Secure Enclave Processor.
Exploitation Status
The exploit requires physical USB access to the targeted device and cannot be launched remotely. While it poses significant risks for device integrity, it does not directly compromise user data. The vulnerability is similar to Checkm8, which left older iPhones permanently vulnerable to jailbreaking.
Indicators of Compromise
Indicators include the presence of a special USB device connected to the iPhone and changes in USB serial numbers indicating successful exploitation. For example:
CPID:8020 CPRV:11 CPFM:03 SCEP:01 BDID:0E ECID:XXXXXXXXXXXXXXXX IBFL:3C SRTG:[iBoot-3865.0.0.4.7] PWND:[usbliter8]
Detection Opportunities
Detection involves monitoring for unauthorized USB connections and changes in device serial numbers. Security teams can use tools like usbliter8ctl to demote production mode or boot raw iBoot, aiding in forensic investigations.
Why This Matters for Defenders
Usbliter8 highlights the importance of understanding hardware vulnerabilities and their potential impact on device security. While user data remains protected, the exploit compromises system integrity and could aid forensic investigations. Defenders should monitor for unauthorized USB connections and changes in device serial numbers to detect potential exploitation attempts.
What Remains Unclear
The exact technical details of how Usbliter8 works are not fully public, and Apple has not officially responded to the research findings. The long-term implications of this exploit on affected devices remain uncertain.
Defender Guidance
Defenders should monitor for unauthorized USB connections and changes in device serial numbers as indicators of potential exploitation attempts. Implementing physical security measures to prevent unauthorized access to devices is crucial. Additionally, staying informed about updates from Apple regarding hardware vulnerabilities can help mitigate risks associated with exploits like Usbliter8.
TAGS: Apple, iPhone, SecureROM, BootROM exploit, A12/A13 chips
#h4rithd #news #HarithDilshan #Apple #Usbliter8
Sources
