Apple Airport Base Station Firmware Update vulnerabilities
12 known vulnerabilities affecting apple/airport_base_station_firmware_update.
Total CVEs
12
CISA KEV
0
Public exploits
1
Exploited in wild
0
Severity breakdown
CRITICAL4HIGH4MEDIUM4
Vulnerabilities
Page 1 of 1
CVE-2017-9417P1CRITICALCVSS 9.8PoCv7.7.92017-12-12
CVE-2017-9417 [CRITICAL] CVE-2017-9417: AirPort Base Station Firmware Update 7.7.9
Apple Security Update: About the security content of AirPort Base Station Firmware Update 7.7.9
Product: AirPort Base Station Firmware Update
Version: 7.7.9
CVE: CVE-2017-9417
Component: AirPort Base Station Firmware
Impact: An attacker within range may be able to execute arbitrary code on the Wi-Fi chip
Description: A memory corruption issue was addressed with improved memory handling.
apple
CVE-2019-8572P3CRITICALCVSS 9.8≥ unspecified, < 7.9≥ unspecified, < 7.82020-10-27
CVE-2019-8572 [CRITICAL] CWE-476 CVE-2019-8572: A null pointer dereference was addressed with improved input validation. This issue is fixed in AirP
A null pointer dereference was addressed with improved input validation. This issue is fixed in AirPort Base Station Firmware Update 7.8.1, AirPort Base Station Firmware Update 7.9.1. A remote attacker may be able to cause arbitrary code execution.
nvdapple
CVE-2019-8578P3CRITICALCVSS 9.8≥ unspecified, < 7.9≥ unspecified, < 7.82020-10-27
CVE-2019-8578 [CRITICAL] CWE-416 CVE-2019-8578: A use after free issue was addressed with improved memory management. This issue is fixed in AirPort
A use after free issue was addressed with improved memory management. This issue is fixed in AirPort Base Station Firmware Update 7.8.1, AirPort Base Station Firmware Update 7.9.1. A remote attacker may be able to cause arbitrary code execution.
nvdapple
CVE-2019-8581P3CRITICALCVSS 9.8≥ unspecified, < 7.9≥ unspecified, < 7.82020-10-27
CVE-2019-8581 [CRITICAL] CWE-125 CVE-2019-8581: An out-of-bounds read was addressed with improved input validation. This issue is fixed in AirPort B
An out-of-bounds read was addressed with improved input validation. This issue is fixed in AirPort Base Station Firmware Update 7.8.1, AirPort Base Station Firmware Update 7.9.1. A remote attacker may be able to leak memory.
nvdapple
CVE-2018-6918P3HIGHCVSS 7.5v7.8.12019-06-20
CVE-2018-6918 [HIGH] CVE-2018-6918: AirPort Base Station Firmware Update 7.8.1
Apple Security Update: About the security content of AirPort Base Station Firmware Update 7.8.1
Product: AirPort Base Station Firmware Update
Version: 7.8.1
CVE: CVE-2018-6918
Component: AirPort Base Station Firmware
Impact: A remote attacker may be able to cause a system denial of service
Description: A denial of service issue was addressed with improved validation.
apple
CVE-2019-8575P3HIGHCVSS 7.5≥ unspecified, < 7.9≥ unspecified, < 7.82020-10-27
CVE-2019-8575 [HIGH] CVE-2019-8575: The issue was addressed with improved data deletion. This issue is fixed in AirPort Base Station Fir
The issue was addressed with improved data deletion. This issue is fixed in AirPort Base Station Firmware Update 7.8.1, AirPort Base Station Firmware Update 7.9.1. A base station factory reset may not delete all user information.
nvdapple
CVE-2019-8580P3HIGHCVSS 7.5≥ unspecified, < 7.9≥ unspecified, < 7.82020-10-27
CVE-2019-8580 [HIGH] CVE-2019-8580: Source-routed IPv4 packets were disabled by default. This issue is fixed in AirPort Base Station Fir
Source-routed IPv4 packets were disabled by default. This issue is fixed in AirPort Base Station Firmware Update 7.8.1, AirPort Base Station Firmware Update 7.9.1. Source-routed IPv4 packets may be unexpectedly accepted.
nvdapple
CVE-2019-8588P3HIGHCVSS 7.5≥ unspecified, < 7.9≥ unspecified, < 7.82020-10-27
CVE-2019-8588 [HIGH] CWE-476 CVE-2019-8588: A null pointer dereference was addressed with improved input validation. This issue is fixed in AirP
A null pointer dereference was addressed with improved input validation. This issue is fixed in AirPort Base Station Firmware Update 7.8.1, AirPort Base Station Firmware Update 7.9.1. A remote attacker may be able to cause a system denial of service.
nvdapple
CVE-2017-13077P4MEDIUMCVSS 6.8v7.7.92017-12-12
CVE-2017-13077 [MEDIUM] CVE-2017-13077: AirPort Base Station Firmware Update 7.7.9
Apple Security Update: About the security content of AirPort Base Station Firmware Update 7.7.9
Product: AirPort Base Station Firmware Update
Version: 7.7.9
CVE: CVE-2017-13077
Component: AirPort Base Station Firmware
Impact: An attacker in Wi-Fi range may force nonce reuse in WPA unicast/PTK clients (Key Reinstallation Attacks - KRACK)
Description: A logic issue existed in the handling of state transitions. This
apple
CVE-2017-13078P4MEDIUMCVSS 5.3v7.7.92017-12-12
CVE-2017-13078 [MEDIUM] CVE-2017-13078: AirPort Base Station Firmware Update 7.7.9
Apple Security Update: About the security content of AirPort Base Station Firmware Update 7.7.9
Product: AirPort Base Station Firmware Update
Version: 7.7.9
CVE: CVE-2017-13078
Component: AirPort Base Station Firmware
Impact: An attacker in Wi-Fi range may force nonce reuse in WPA unicast/PTK clients (Key Reinstallation Attacks - KRACK)
Description: A logic issue existed in the handling of state transitions. This
apple
CVE-2019-7291P4MEDIUMCVSS 6.5≥ unspecified, < 7.9≥ unspecified, < 7.82020-10-27
CVE-2019-7291 [MEDIUM] CVE-2019-7291: A denial of service issue was addressed with improved memory handling. This issue is fixed in AirPor
A denial of service issue was addressed with improved memory handling. This issue is fixed in AirPort Base Station Firmware Update 7.8.1, AirPort Base Station Firmware Update 7.9.1. An attacker in a privileged position may be able to perform a denial of service attack.
nvdapple
CVE-2017-13080P4MEDIUMCVSS 5.3v7.7.92017-12-12
CVE-2017-13080 [MEDIUM] CVE-2017-13080: AirPort Base Station Firmware Update 7.7.9
Apple Security Update: About the security content of AirPort Base Station Firmware Update 7.7.9
Product: AirPort Base Station Firmware Update
Version: 7.7.9
CVE: CVE-2017-13080
Component: AirPort Base Station Firmware
Impact: An attacker in Wi-Fi range may force nonce reuse in WPA multicast/GTK clients (Key Reinstallation Attacks - KRACK)
Description: A logic issue existed in the handling of state transitions. Thi
apple