CVE-2011-3215

The kernel in Apple Mac OS X before 10.7.2 does not properly prevent FireWire DMA in the absence of a login, which allows physically proximate attackers to…

published October 14, 2011

CVSS
—
EPSS
0%
Percentile
29.3
In the wild
Unconfirmed
What it is

The kernel in Apple Mac OS X before 10.7.2 does not properly prevent FireWire DMA in the absence of a login, which allows physically proximate attackers to bypass intended access restrictions and discover a password by making a DMA request in the (1) loginwindow, (2) boot, or (3) shutdown state.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00369 · 29.3th percentile
Published
2011-10-14T10:00Z
EPSS history
Timeline
  • 14 OCT 10:00Z
    The kernel in Apple Mac OS X before 10.7.2 does not properly prevent FireWire DMA in the absence of a login, which allows physically proximate attackers to…
    cvelistv5