Vulnerabilities > Apple > Airport Extreme Base Station Firmware

DATE CVE VULNERABILITY TITLE RISK
2010-12-22 CVE-2010-1804 Unspecified vulnerability in Apple products
Unspecified vulnerability in the network bridge functionality on the Apple Time Capsule, AirPort Extreme Base Station, and AirPort Express Base Station with firmware before 7.5.2 allows remote attackers to cause a denial of service (networking outage) via a crafted DHCP reply.
network
apple
7.1
2010-12-22 CVE-2010-0039 Permissions, Privileges, and Access Controls vulnerability in Apple products
The Application-Level Gateway (ALG) on the Apple Time Capsule, AirPort Extreme Base Station, and AirPort Express Base Station with firmware before 7.5.2 modifies PORT commands in incoming FTP traffic, which allows remote attackers to use the device's IP address for arbitrary intranet TCP traffic by leveraging write access to an intranet FTP server.
network
high complexity
apple CWE-264
2.6
2010-12-22 CVE-2009-2189 Resource Management Errors vulnerability in Apple products
The ICMPv6 implementation on the Apple Time Capsule, AirPort Extreme Base Station, and AirPort Express Base Station with firmware before 7.5.2 does not limit the rate of (1) Router Advertisement and (2) Neighbor Discovery packets, which allows remote attackers to cause a denial of service (resource consumption and device restart) by sending many packets.
low complexity
apple CWE-399
6.1