VULNERABILITY INTELLIGENCE
CVE-2015-8512
CVSS score4.6 MEDIUM
EPSS probability0.32%
CISA KEVNot currently listed
Published2016-01-09
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Description
The lockscreen feature in Mozilla Firefox OS before 2.5 does not properly restrict failed authentication attempts, which makes it easier for physically proximate attackers to obtain access by entering many passcode guesses.
Weakness classification
- CWE-284: Improper Access Control
Primary references
- security@mozilla.org — Vendor Advisory
- security@mozilla.org
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108