ByteOS Network

NVD Vulnerability Details :

CVE-2018-4251

Analyzed

Source-product-security@apple.com

Published At-08 Jun, 2018 | 18:29

Updated At-03 Oct, 2019 | 00:03

An issue was discovered in certain Apple products. macOS before 10.13.5 is affected. The issue involves the "Firmware" component. It allows attackers to modify the EFI flash-memory region that a crafted app that has root access.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.0	5.5	MEDIUM	CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
Primary	2.0	7.1	HIGH	AV:N/AC:M/Au:N/C:N/I:C/A:N

Type: Primary

Version: 3.0

Base score: 5.5

Base severity: MEDIUM

Vector:

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Type: Primary

Version: 2.0

Base score: 7.1

Base severity: HIGH

Vector:

AV:N/AC:M/Au:N/C:N/I:C/A:N

CPE Matches

Apple Inc.

>>mac_os_x>>Versions before 10.13.5(exclusive)

cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-732	Primary	nvd@nist.gov

CWE ID: CWE-732

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
http://seclists.org/fulldisclosure/2019/Mar/45	product-security@apple.com	Mailing List Third Party Advisory
http://www.securitytracker.com/id/1041027	product-security@apple.com	Third Party Advisory VDB Entry
https://support.apple.com/HT208849	product-security@apple.com	Vendor Advisory

Hyperlink: http://seclists.org/fulldisclosure/2019/Mar/45

Source: product-security@apple.com

Resource:

Mailing List

Third Party Advisory

Hyperlink: http://www.securitytracker.com/id/1041027

Source: product-security@apple.com

Resource:

Third Party Advisory

VDB Entry

Hyperlink: https://support.apple.com/HT208849

Source: product-security@apple.com

Resource:

Vendor Advisory

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History