CVE-2010-1804

Опубликовано: 22 дек. 2010

Источник: nvd

CVSS2: 7.1

EPSS Низкий

Описание

Unspecified vulnerability in the network bridge functionality on the Apple Time Capsule, AirPort Extreme Base Station, and AirPort Express Base Station with firmware before 7.5.2 allows remote attackers to cause a denial of service (networking outage) via a crafted DHCP reply.

Ссылки

http://lists.apple.com/archives/security-announce/2010//Dec/msg00001.html
Patch
Vendor Advisory
http://support.apple.com/kb/HT4298
Patch
Vendor Advisory
http://www.securitytracker.com/id?1024907
http://lists.apple.com/archives/security-announce/2010//Dec/msg00001.html
Patch
Vendor Advisory
http://support.apple.com/kb/HT4298
Patch
Vendor Advisory
http://www.securitytracker.com/id?1024907

Уязвимые конфигурации

Конфигурация 1

Одновременно

Одно из

cpe:2.3:h:apple:airport_express_base_station_firmware:*:*:*:*:*:*:*:*

Версия до 7.4.2 (включая)

cpe:2.3:h:apple:airport_express_base_station_firmware:3.84:*:*:*:*:*:*:*

cpe:2.3:h:apple:airport_express_base_station_firmware:4.0.9:*:*:*:*:*:*:*

cpe:2.3:h:apple:airport_express_base_station_firmware:6.1:*:*:*:*:*:*:*

cpe:2.3:h:apple:airport_express_base_station_firmware:6.3:*:*:*:*:*:*:*

cpe:2.3:h:apple:airport_express_base_station_firmware:7.3.2:*:*:*:*:*:*:*

cpe:2.3:h:apple:airport_express_base_station_firmware:7.4.1:*:*:*:*:*:*:*

cpe:2.3:h:apple:airport_extreme_base_station_firmware:5.5:*:*:*:*:*:*:*

cpe:2.3:h:apple:airport_extreme_base_station_firmware:5.7:*:*:*:*:*:*:*

Одно из

cpe:2.3:h:apple:airport_express:*:*:*:*:*:*:*:*

cpe:2.3:h:apple:airport_extreme:*:*:*:*:*:*:*:*

cpe:2.3:h:apple:time_capsule:*:*:*:*:*:*:*:*

EPSS

Процентиль: 71%

0.0139

Низкий

7.1 High

CVSS2

Дефекты

NVD-CWE-noinfo

Связанные уязвимости

GHSA-f6wx-7298-mhrh

github

больше 4 лет назад