6.1

CVE-2009-2189

EPSS 0.28%
Published 22.12.2010 03:00:01
Last modified 11.04.2025 00:51:21
Source cve@mitre.org
Teams watchlist Login
Open Login

The ICMPv6 implementation on the Apple Time Capsule, AirPort Extreme Base Station, and AirPort Express Base Station with firmware before 7.5.2 does not limit the rate of (1) Router Advertisement and (2) Neighbor Discovery packets, which allows remote attackers to cause a denial of service (resource consumption and device restart) by sending many packets.

Affected products Warnungen 0 Metrics 2 CWE 0 References 6

Data is provided by the National Vulnerability Database (NVD)

Apple ≫ Airport Express Base Station Firmware Version <= 7.4.2

Apple ≫ Airport Express Base Station Firmware Version3.84

Apple ≫ Airport Express Base Station Firmware Version4.0.9

Apple ≫ Airport Express Base Station Firmware Version6.1

Apple ≫ Airport Express Base Station Firmware Version6.3

Apple ≫ Airport Express Base Station Firmware Version7.3.2

Apple ≫ Airport Express Base Station Firmware Version7.4.1

Apple ≫ Airport Extreme Base Station Firmware Version5.5

Apple ≫ Airport Extreme Base Station Firmware Version5.7

Apple ≫ Airport Express

Apple ≫ Airport Extreme

Apple ≫ Time Capsule

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.28%	0.487

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	6.1	6.5	6.9	AV:A/AC:L/Au:N/C:N/I:N/A:C

http://lists.apple.com/archives/security-announce/2010//Dec/msg00001.html

Patch

Vendor Advisory

http://support.apple.com/kb/HT4298

Patch

Vendor Advisory

http://www.securitytracker.com/id?1024907

https://nvd.nist.gov/vuln/detail/CVE-2009-2189

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2009-2189

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2009-2189

EUVD