CVE-2015-5960: Mozilla Firefox OS before 2.2 allows physically proximate attackers to bypass the pass-code protection mech...

Security readout for executives and security teams

This is a lock-screen bypass affecting Mozilla Firefox OS before 2.2. Someone with physical access to the device could use USB mounting behavior to access USB Mass Storage media despite pass-code protection. It is not a remote internet attack, but it matters for lost, stolen, or shared devices containing sensitive data. Exposure is limited to environments still using Mozilla Firefox OS devices earlier than version 2.2, especially where local media contains sensitive data. Modern fleets are unlikely to be exposed unless legacy devices remain in use. Treat this as a legacy device exposure issue, not a broad enterprise emergency. Prioritize asset discovery and retirement if Firefox OS devices may still exist in the environment. Mitigation focus: Identify and retire Firefox OS devices earlier than 2.2.; Upgrade affected devices to Firefox OS 2.2 or later if supported.; Restrict physical and USB access to legacy devices..

Prepared

Jun 13, 2026, 22:22 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.