Unscored CVE-2015-3692 EUVD-2015-3728GHSA-j3vj-cfxc-hfjx

Apple Mac EFI before 2015-001, as used in OS X before 10.10.4 and other products, does not enforce a locking protection mechanism upon bein…

Published Jul 3, 2015 · Updated Aug 6, 2024 · Assigned by apple

Description

Apple Mac EFI before 2015-001, as used in OS X before 10.10.4 and other products, does not enforce a locking protection mechanism upon being woken from sleep, which allows local users to conduct EFI flash attacks by leveraging root privileges.

References

APPLE-SA-2015-06-30-3 vendor-advisory
APPLE-SA-2015-06-30-2 vendor-advisory
http://support.apple.com/kb/HT204942
75495 vdb-entry
1032444 vdb-entry
http://support.apple.com/kb/HT204934