CVE-2023-44147: 
WordPress vulnerability analysis and mitigation

The CVE-2023-44147 is a vulnerability discovered in NetworkExtension that allows an app to gain unauthorized access to Local Network. The vulnerability was addressed in iOS 18 and iPadOS 18, released in September 2024, affecting iPhone XS and later, iPad Pro models, iPad Air 3rd generation and later, iPad 7th generation and later, and iPad mini 5th generation and later (Apple Security).

The vulnerability was classified as an unauthorized access issue that was addressed through improved state management. The discovery is credited to Alexander Heinrich from SEEMOO, DistriNet, KU Leuven (@vanhoefm), TU Darmstadt (@Sn0wfreeze), and Mathy Vanhoef (Apple Security).

The primary impact of this vulnerability is that it allows applications to gain unauthorized access to Local Network functionality, potentially compromising network security and privacy (Apple Security).

Apple has addressed this vulnerability through improved state management in iOS 18 and iPadOS 18. Users are advised to update their devices to these versions to protect against potential exploitation (Apple Security).