Описание
An issue was discovered in certain Apple products. macOS before 10.13.5 is affected. The issue involves the "Firmware" component. It allows attackers to modify the EFI flash-memory region that a crafted app that has root access.
Ссылки
- Mailing ListThird Party Advisory
- Third Party AdvisoryVDB Entry
- Vendor Advisory
- Mailing ListThird Party Advisory
- Third Party AdvisoryVDB Entry
- Vendor Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 10.13.5 (исключая)
cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*
EPSS
Процентиль: 35%
0.00144
Низкий
5.5 Medium
CVSS3
7.1 High
CVSS2
Дефекты
CWE-732
Связанные уязвимости
CVSS3: 5.5
github
больше 3 лет назад
An issue was discovered in certain Apple products. macOS before 10.13.5 is affected. The issue involves the "Firmware" component. It allows attackers to modify the EFI flash-memory region that a crafted app that has root access.
CVSS3: 6.2
fstec
больше 7 лет назад
Уязвимость компонента Firmware операционной системы Mac OS X, позволяющая нарушителю изменять области флэш-памяти EFI
EPSS
Процентиль: 35%
0.00144
Низкий
5.5 Medium
CVSS3
7.1 High
CVSS2
Дефекты
CWE-732