Description
The "iCloud Find My Mac" feature in Apple OS X before 10.10 does not properly enforce rate limiting of lost-mode PIN entry, which makes it easier for physically proximate attackers to obtain access via a brute-force attack involving a series of reboots.
References
- macosx-cve20144435-info-disc(97636) vdb-entry
- APPLE-SA-2014-10-16-1 vendor-advisory
- 1031063 vdb-entry
- https://support.apple.com/kb/HT6535
- 70638 vdb-entry