Apple Airport Base Station Firmware vulnerabilities

11 CVEs affecting Apple Airport Base Station Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2019-8588, published 2020-10-27.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2015-7988, published 2016-06-26. Critical severity, CVSS 9.8. EPSS: 4.8% chance of exploitation in the next 30 days. The handle_regservice_request function in mDNSResponder before 625.41.2 allows remote attackers to execute arbitrary code or cause a denial of service (NULL pointer dereference) via unspecified…
CVE-2015-7029, published 2016-07-03. Critical severity, CVSS 9.8. EPSS: 3.9% chance of exploitation in the next 30 days. Apple AirPort Base Station Firmware before 7.6.7 and 7.7.x before 7.7.7 misparses DNS data, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)…
CVE-2019-8572, published 2020-10-27. Critical severity, CVSS 9.8. EPSS: 2.7% chance of exploitation in the next 30 days. A null pointer dereference was addressed with improved input validation. This issue is fixed in AirPort Base Station Firmware Update 7.8.1, AirPort Base Station Firmware Update 7.9.1. A remote…
CVE-2019-8578, published 2020-10-27. Critical severity, CVSS 9.8. EPSS: 2.7% chance of exploitation in the next 30 days. A use after free issue was addressed with improved memory management. This issue is fixed in AirPort Base Station Firmware Update 7.8.1, AirPort Base Station Firmware Update 7.9.1. A remote attacker…
CVE-2015-7987, published 2016-06-26. Critical severity, CVSS 9.8. EPSS: 2.5% chance of exploitation in the next 30 days. Multiple buffer overflows in mDNSResponder before 625.41.2 allow remote attackers to read or write to out-of-bounds memory locations via vectors involving the (1) GetValueForIPv4Addr, (2)…
CVE-2019-8588, published 2020-10-27. High severity, CVSS 7.5. EPSS: 1.8% chance of exploitation in the next 30 days. A null pointer dereference was addressed with improved input validation. This issue is fixed in AirPort Base Station Firmware Update 7.8.1, AirPort Base Station Firmware Update 7.9.1. A remote…
CVE-2019-8581, published 2020-10-27. Critical severity, CVSS 9.8. EPSS: 1.8% chance of exploitation in the next 30 days. An out-of-bounds read was addressed with improved input validation. This issue is fixed in AirPort Base Station Firmware Update 7.8.1, AirPort Base Station Firmware Update 7.9.1. A remote attacker…
CVE-2019-8575, published 2020-10-27. High severity, CVSS 7.5. EPSS: 1.2% chance of exploitation in the next 30 days. The issue was addressed with improved data deletion. This issue is fixed in AirPort Base Station Firmware Update 7.8.1, AirPort Base Station Firmware Update 7.9.1. A base station factory reset may…
CVE-2019-7291, published 2020-10-27. Medium severity, CVSS 6.5. EPSS: 1.1% chance of exploitation in the next 30 days. A denial of service issue was addressed with improved memory handling. This issue is fixed in AirPort Base Station Firmware Update 7.8.1, AirPort Base Station Firmware Update 7.9.1. An attacker in a…
CVE-2013-5132, published 2013-09-08. Medium severity, CVSS 5.4. EPSS: 1.1% chance of exploitation in the next 30 days. Apple AirPort Base Station Firmware before 7.6.4 does not properly handle incorrect frame lengths, which allows remote attackers to cause a denial of service (device crash) by associating with the…

Latest

CVE-2019-8580, published 2020-10-27. High severity, CVSS 7.5. EPSS: 1.1% chance of exploitation in the next 30 days. Source-routed IPv4 packets were disabled by default. This issue is fixed in AirPort Base Station Firmware Update 7.8.1, AirPort Base Station Firmware Update 7.9.1. Source-routed IPv4 packets may be…