Apple Airport Extreme vulnerabilities

7 CVEs affecting Apple Airport Extreme, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2010-1804, published 2010-12-22.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2007-1338, published 2007-03-08. High severity, CVSS 7.5. EPSS: 2.7% chance of exploitation in the next 30 days. The default configuration of the AirPort utility in Apple AirPort Extreme creates an IPv6 tunnel but does not enable the "Block incoming IPv6 connections" setting, which might allow remote attackers…
CVE-2010-0039, published 2010-12-22. Low severity, CVSS 2.6. EPSS: 1.7% chance of exploitation in the next 30 days. The Application-Level Gateway (ALG) on the Apple Time Capsule, AirPort Extreme Base Station, and AirPort Express Base Station with firmware before 7.5.2 modifies PORT commands in incoming FTP…
CVE-2005-3714, published 2005-12-31. Medium severity, CVSS 5.0. EPSS: 1.7% chance of exploitation in the next 30 days. The network interface for Apple AirPort Express 6.x before Firmware Update 6.3, and AirPort Extreme 5.x before Firmware Update 5.7, allows remote attackers to cause a denial of service (unresponsive…
CVE-2005-0289, published 2005-05-02. Medium severity, CVSS 5.0. EPSS: 1.6% chance of exploitation in the next 30 days. Apple AirPort Express prior to 6.1.1 and Extreme prior to 5.5.1, configured as a Wireless Data Service (WDS), allows remote attackers to cause a denial of service (device freeze) by connecting to UDP…
CVE-2010-1804, published 2010-12-22. High severity, CVSS 7.1. EPSS: 1.4% chance of exploitation in the next 30 days. Unspecified vulnerability in the network bridge functionality on the Apple Time Capsule, AirPort Extreme Base Station, and AirPort Express Base Station with firmware before 7.5.2 allows remote…
CVE-2010-0962, published 2010-03-10. Medium severity, CVSS 5.0. EPSS: 1.2% chance of exploitation in the next 30 days. The FTP proxy server in Apple AirPort Express, AirPort Extreme, and Time Capsule with firmware 7.5 does not restrict the IP address and port specified in a PORT command from a client, which allows…
CVE-2009-2189, published 2010-12-22. Medium severity, CVSS 6.1. EPSS: 0.8% chance of exploitation in the next 30 days. The ICMPv6 implementation on the Apple Time Capsule, AirPort Extreme Base Station, and AirPort Express Base Station with firmware before 7.5.2 does not limit the rate of (1) Router Advertisement and…