Lucene search
AppleCVE-2015-5914HistoryOct 09, 2015 - 5:59 a.m.
CVE-2015-5914
2015-10-0905:59:32
CWE-17
apple
web.nvd.nist.gov
34
cve-2015-5914
apple
os x
firmware
efi
update
thunderstrike
security vulnerability
CVSS2
4.7
Attack Vector
LOCAL
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
COMPLETE
Availability Impact
NONE
AV:L/AC:M/Au:N/C:N/I:C/A:N
AI Score
6.3
Confidence
Low
EPSS
0.001
Percentile
44.5%
The EFI component in Apple OS X before 10.11 allows physically proximate attackers to modify firmware during the EFI update process by inserting an Apple Ethernet Thunderbolt adapter with crafted code in an Option ROM, aka a “Thunderstrike” issue. NOTE: this issue exists because of an incomplete fix for CVE-2014-4498.
Affected configurations
Node
applemac_os_xRange≤10.10.5
Related
cvelist
cvelist
CVE-2015-5914
2015-10-09 01:00:00
CVE-2014-4498
2015-01-30 11:00:00
prion
prion
Code injection
2015-10-09 05:59:00
Code injection
2015-01-30 11:59:00
nvd
nvd
CVE-2015-5914
2015-10-09 05:59:32
CVE-2014-4498
2015-01-30 11:59:27
cve
cve
CVE-2014-4498
2015-01-30 11:59:27
openvas
openvas
Apple Mac OS X Multiple Vulnerabilities-02 (Oct 2015)
2015-10-29 00:00:00
Apple Mac OS X Multiple Vulnerabilities -01 (Mar 2015)
2015-03-05 00:00:00
nessus
nessus
Mac OS X < 10.10.2 Multiple Vulnerabilities
2015-03-04 00:00:00
Mac OS X 10.10.x < 10.10.2 Multiple Vulnerabilities (POODLE)
2015-01-29 00:00:00
Mac OS X < 10.11 Multiple Vulnerabilities (GHOST)
2015-10-05 00:00:00
securityvulns
securityvulns
APPLE-SA-2015-09-30-3 OS X El Capitan 10.11
2015-10-05 00:00:00
APPLE-SA-2015-01-27-4 OS X 10.10.2 and Security Update 2015-001
2015-02-02 00:00:00
Apple Mac OS X multiple security vulnerabilities
2015-02-02 00:00:00
CVSS2
4.7
Attack Vector
LOCAL
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
COMPLETE
Availability Impact
NONE
AV:L/AC:M/Au:N/C:N/I:C/A:N
AI Score
6.3
Confidence
Low
EPSS
0.001
Percentile
44.5%
Related for CVE-2015-5914