CWE Code: 284
Vulnerability Type: privilege_escalation
CVSS Score: 6.8
CWE Name:  Improper Access Control
Summary: apple mac efi before 2015-001, as used in os x before 10.10.4 and other products, does not enforce a locking protection mechanism upon being woken from sleep, which allows local users to conduct efi flash attacks by leveraging root privileges.
Access Authentication: SINGLE
Access Complexity: LOW
Access Vector: LOCAL
Impact (C/I/A): COMPLETE/COMPLETE/COMPLETE
Published Date: 2015-07-03
Last Modified Date: 2016-12-06