Home
Home
Trends
Trends
Vulnerabilities
Vulnerabilities
News
News
Researchers
Researchers
Why dbugs?
Why dbugs?
Settings

Trammell Hudson

Researcher fromTwo Sigma Investments
#19141of 60,403
16.2Total CVSS
Vulnerabilities · 3
Medium
3
PT-2015-2297
2015-10-09
4.7
CVE-2015-5914
Apple
Os X
The issue is related to errors in the code of the EFI component in Mac OS X, which can be exploited by a local attacker to modify the firmware using a Thunderbolt interface. This can be achieved by inserting a crafted device, such as an Apple Ethernet Thunderbolt adapter with malicious code in its Option ROM. The exploitation of this issue may allow an attacker to gain unauthorized access to the system.
PT-2015-6290
2015-07-03
6.8
CVE-2015-3692
Apple
Mac Efi
The issue allows local users to conduct EFI flash attacks by leveraging root privileges, due to the lack of a locking protection mechanism when the system is woken from sleep.
PT-2015-3761
2015-01-30
4.7
CVE-2014-4498
Apple
Os X
The issue allows physically proximate attackers to modify firmware during the EFI update process by inserting a Thunderbolt device with crafted code in an Option ROM.