CVE-2005-0289: Apple Airport Express

Medium severity, CVSS 5.0. EPSS: 1.6% chance of exploitation in the next 30 days.

Apple AirPort Express prior to 6.1.1 and Extreme prior to 5.5.1, configured as a Wireless Data Service (WDS), allows remote attackers to cause a denial of service (device freeze) by connecting to UDP port 161 and before link-state change occurs.

Affected products

• Apple Airport Express: up to and including 6.1
• Apple Airport Extreme: up to and including 5.5

Published 2005-05-02. Last modified 2026-06-16.