CVE-2010-0039

CWE-2643 documents3 sources
Severity
2.6LOW
EPSS
0.3%
top 46.13%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Apple Airport Express Base Station FirmwareApple Airport Extreme Base Station Firmware
Timeline
PublishedDec 22
Latest updateMay 2

Description

The Application-Level Gateway (ALG) on the Apple Time Capsule, AirPort Extreme Base Station, and AirPort Express Base Station with firmware before 7.5.2 modifies PORT commands in incoming FTP traffic, which allows remote attackers to use the device's IP address for arbitrary intranet TCP traffic by leveraging write access to an intranet FTP server.

CVSS vector

AV:N/AC:H/C:P/I:N/A:NExploitability: 4.9 | Impact: 2.9

Affected Packages2 packages

Patches

Patch: lists.apple.com ↗Patch: support.apple.com ↗Patch: lists.apple.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-6j7w-4w4r-9xwr: The Application-Level Gateway (ALG) on the Apple Time Capsule, AirPort Extreme Base Station, and AirPort Express Base Station with firmware before 7↗2022-05-02
▶
CVEList
CVE-2010-0039: The Application-Level Gateway (ALG) on the Apple Time Capsule, AirPort Extreme Base Station, and AirPort Express Base Station with firmware before 7↗2010-12-22
▶
CVE-2010-0039 (LOW CVSS 2.6) | The Application-Level Gateway (ALG) | cvebase.io