CVE-2015-5914

The EFI component in Apple OS X before 10.11 allows physically proximate attackers to modify firmware during the EFI update process by inserting an Apple…

published October 9, 2015

CVSS
—
EPSS
0%
Percentile
27.6
In the wild
Unconfirmed
What it is

The EFI component in Apple OS X before 10.11 allows physically proximate attackers to modify firmware during the EFI update process by inserting an Apple Ethernet Thunderbolt adapter with crafted code in an Option ROM, aka a "Thunderstrike" issue. NOTE: this issue exists because of an incomplete fix for CVE-2014-4498.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00352 · 27.6th percentile
Published
2015-10-09T01:00Z
EPSS history
Timeline
  • 09 OCT 01:00Z
    The EFI component in Apple OS X before 10.11 allows physically proximate attackers to modify firmware during the EFI update process by inserting an Apple…
    cvelistv5