Published: Thu, December 14, 2017
Science | By Hubert Green

Apple iOS 11.2.1 software rollout fixes HomeKit remote access vulnerability

Apple iOS 11.2.1 software rollout fixes HomeKit remote access vulnerability

iOS 11 is one of the biggest software updates Apple has released, but it launched along with some bugs.

Today Apple has made iOS 11.2.1 and tvOS 11.2.1 available to download and install.

The Inquirer reported that Apple is already aware of the new issue brought by the iOS 11.2 update. The updates fix a known remote sharing security vulnerability (CVE-2017-13903) affecting Apple's HomeKit framework for communicating with smart devices in your home. The flaw gave users unauthorised access to smart home accessories such as locks, garage and more in some situations.

The reason for a simultaneous software update is because it restores HomeKit for shared users, a feature that was recently disabled due to a bug last week. But, the highlight of the said update is the Apple Pay Cash feature. Meanwhile, over in beta land, Apple's beamed out the iOS 11.2.5, watchOS 4.2.2, and tvOS 11.2.5 developer beta, so watch out for those in the weeks ahead.

The iOS 11.2.1 over-the-air update can be downloaded for free on all eligible devices by applying these simple steps.

On your Apple TV, the update can be installed in a similar manner by going into Settings System Software Updates in tvOS. After this update, the vulnerability is fully patched and remote access for shared users is secure. Devices on beta versions may need to remove beta profiles then reboot to see the updates. There's also the usual bug fixes. They won't have to suffer through the setback for long though, as iOS 11.2.1 restores this functionality.

Like this: