CVE-2009-2189

CWE-3993 documents3 sources
Severity
6.1MEDIUM
EPSS
0.3%
top 48.28%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Apple Airport Express Base Station FirmwareApple Airport Extreme Base Station Firmware
Timeline
PublishedDec 22
Latest updateMay 2

Description

The ICMPv6 implementation on the Apple Time Capsule, AirPort Extreme Base Station, and AirPort Express Base Station with firmware before 7.5.2 does not limit the rate of (1) Router Advertisement and (2) Neighbor Discovery packets, which allows remote attackers to cause a denial of service (resource consumption and device restart) by sending many packets.

CVSS vector

AV:A/AC:L/C:N/I:N/A:CExploitability: 6.5 | Impact: 6.9

Affected Packages2 packages

Patches

Patch: lists.apple.com ↗Patch: support.apple.com ↗Patch: lists.apple.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-mvfx-gq6c-f353: The ICMPv6 implementation on the Apple Time Capsule, AirPort Extreme Base Station, and AirPort Express Base Station with firmware before 7↗2022-05-02
▶
CVEList
CVE-2009-2189: The ICMPv6 implementation on the Apple Time Capsule, AirPort Extreme Base Station, and AirPort Express Base Station with firmware before 7↗2010-12-22
▶
CVE-2009-2189 (MEDIUM CVSS 6.1) | The ICMPv6 implementation on the Ap | cvebase.io