CVE-2014-4428

CVE-2014-4428 describes a vulnerability in Apple OS X versions prior to 10.10, where Bluetooth did not enforce encryption for Human Interface Device (HID) Low Energy devices. This flaw allowed remote attackers within Bluetooth range to spoof a legitimate device by exploiting previously established pairings. The vulnerability has a CVSS score of 5.4, indicating a medium severity, with an adjacent attack vector, medium attack complexity, and potential for partial compromise of confidentiality, integrity, and availability. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or inclusion in CISA's KEV catalog, though it garnered limited media coverage and community discussion at the time of its disclosure.