CVE-2009-2822

Опубликовано: 05 апр. 2010

Источник: nvd

CVSS2: 6.8

EPSS Низкий

Описание

AirPort Utility before 5.5.1 for Apple AirPort Base Station does not properly distribute MAC address ACLs to network extenders, which allows remote attackers to bypass intended access restrictions via an 802.11 authentication frame.

Ссылки

http://lists.apple.com/archives/security-announce/2010//Mar/msg00004.html
Patch
Vendor Advisory
http://secunia.com/advisories/39160
Vendor Advisory
http://securitytracker.com/id?1023801
http://support.apple.com/kb/HT3958
Patch
Vendor Advisory
http://www.osvdb.org/63420
http://www.securityfocus.com/bid/39134
Patch
http://www.vupen.com/english/advisories/2010/0778
Patch
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/57434
http://lists.apple.com/archives/security-announce/2010//Mar/msg00004.html
Patch
Vendor Advisory
http://secunia.com/advisories/39160
Vendor Advisory
http://securitytracker.com/id?1023801
http://support.apple.com/kb/HT3958
Patch
Vendor Advisory
http://www.osvdb.org/63420
http://www.securityfocus.com/bid/39134
Patch
http://www.vupen.com/english/advisories/2010/0778
Patch
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/57434

Уязвимые конфигурации

Конфигурация 1

Одновременно

Одно из

cpe:2.3:a:apple:airport_utility:*:*:*:*:*:*:*:*

Версия до 5.4.2 (включая)

cpe:2.3:a:apple:airport_utility:5.0:*:*:*:*:*:*:*

cpe:2.3:a:apple:airport_utility:5.3.1:*:*:*:*:*:*:*

cpe:2.3:a:apple:airport_utility:5.3.2:*:*:*:*:*:*:*

cpe:2.3:a:apple:airport_utility:5.4.1:*:*:*:*:*:*:*

cpe:2.3:h:apple:airport_base_station:*:*:*:*:*:*:*:*

EPSS

Процентиль: 64%

0.00468

Низкий

6.8 Medium

CVSS2

Дефекты

CWE-264

Связанные уязвимости

GHSA-67rf-55wq-rpmf

github

почти 4 года назад