Apple Airport Express vulnerabilities

3 known vulnerabilities affecting apple/airport_express.

Total CVEs

3

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

MEDIUM3

Vulnerabilities

Page 1 of 1

CVE-2010-0962MEDIUMCVSS 5.0v7.52010-03-10

CVE-2010-0962 [MEDIUM] CWE-264 CVE-2010-0962: The FTP proxy server in Apple AirPort Express, AirPort Extreme, and Time Capsule with firmware 7.5 d The FTP proxy server in Apple AirPort Express, AirPort Extreme, and Time Capsule with firmware 7.5 does not restrict the IP address and port specified in a PORT command from a client, which allows remote attackers to leverage intranet FTP servers for arbitrary TCP forwarding via a crafted PORT command.

CVE-2005-3714MEDIUMCVSS 5.0v6.12005-12-31

CVE-2005-3714 [MEDIUM] CWE-399 CVE-2005-3714: The network interface for Apple AirPort Express 6.x before Firmware Update 6.3, and AirPort Extreme The network interface for Apple AirPort Express 6.x before Firmware Update 6.3, and AirPort Extreme 5.x before Firmware Update 5.7, allows remote attackers to cause a denial of service (unresponsive interface) via malformed packets.

CVE-2005-0289MEDIUMCVSS 5.0≤ 6.12005-05-02

CVE-2005-0289 [MEDIUM] CVE-2005-0289: Apple AirPort Express prior to 6.1.1 and Extreme prior to 5.5.1, configured as a Wireless Data Servi Apple AirPort Express prior to 6.1.1 and Extreme prior to 5.5.1, configured as a Wireless Data Service (WDS), allows remote attackers to cause a denial of service (device freeze) by connecting to UDP port 161 and before link-state change occurs.