What is the severity of CVE-2013-5188?

CVE-2013-5188 is considered a medium severity vulnerability as it allows unauthorized access to an unattended workstation.

How do I fix CVE-2013-5188?

To fix CVE-2013-5188, disable hibernation or ensure that password protection is enabled for waking from sleep.

Who is affected by CVE-2013-5188?

CVE-2013-5188 affects users of Apple Mac OS X versions up to 10.8.5 who have hibernation and autologin enabled.

What kind of attack does CVE-2013-5188 enable?

CVE-2013-5188 enables physical proximity attacks, allowing nearby attackers to access the system without authentication.

When was CVE-2013-5188 reported?

CVE-2013-5188 was reported in October 2013.

Vulnerability/
CVE-2013-5188

medium

CWE

264

24/10/2013

3/10/2022

6/8/2024

CVE-2013-5188

First published: Thu Oct 24 2013(Updated: )

The Screen Lock implementation in Apple Mac OS X before 10.9, when hibernation and autologin are enabled, does not require a password for a transition out of hibernation, which allows physically proximate attackers to obtain access by visiting an unattended workstation in the hibernating state.

Credit: product-security@apple.com

Affected Software	Affected Version	How to fix
Apple iOS and macOS	<=10.8.5
Apple iOS and macOS	=10.8.0
Apple iOS and macOS	=10.8.1
Apple iOS and macOS	=10.8.2
Apple iOS and macOS	=10.8.3
Apple iOS and macOS	=10.8.4
Apple iOS and macOS	=10.8.5

Never miss a vulnerability like this again

Reference Links

http://lists.apple.com/archives/security-announce/2013/Oct/msg00004.html

Frequently Asked Questions

What is the severity of CVE-2013-5188?
CVE-2013-5188 is considered a medium severity vulnerability as it allows unauthorized access to an unattended workstation.
How do I fix CVE-2013-5188?
To fix CVE-2013-5188, disable hibernation or ensure that password protection is enabled for waking from sleep.
Who is affected by CVE-2013-5188?
CVE-2013-5188 affects users of Apple Mac OS X versions up to 10.8.5 who have hibernation and autologin enabled.
What kind of attack does CVE-2013-5188 enable?
CVE-2013-5188 enables physical proximity attacks, allowing nearby attackers to access the system without authentication.
When was CVE-2013-5188 reported?
CVE-2013-5188 was reported in October 2013.

agent/type
agent/first-publish-date
collector/mitre-cve
source/MITRE
agent/references
agent/weakness
agent/last-modified-date
agent/severity
agent/author
agent/event
agent/description
agent/source
agent/softwarecombine
agent/tags
collector/nvd-index
agent/software-canonical-lookup-request
vendor/apple
canonical/apple ios and macos
version/apple ios and macos/10.8.5
version/apple ios and macos/10.8.0
version/apple ios and macos/10.8.1
version/apple ios and macos/10.8.2
version/apple ios and macos/10.8.3
version/apple ios and macos/10.8.4

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.