CVSS: 2.6EPSS: 0%CPEs: 12EXPL: 0CVE-2010-0039
https://notcve.org/view.php?id=CVE-2010-0039
The Application-Level Gateway (ALG) on the Apple Time Capsule, AirPort Extreme Base Station, and AirPort Express Base Station with firmware before 7.5.2 modifies PORT commands in incoming FTP traffic, which allows remote attackers to use the device's IP address for arbitrary intranet TCP traffic by leveraging write access to an intranet FTP server. Application-Level Gateway (ALG) en Apple Time Capsule, AirPort Extreme Base Station, y AirPort Express Base Station con firmware anterior v7.5.2 modifica los comandos PORT en el tráfico FTP, lo que permite a atacantes remotos usar la dirección IP del dispositivo para tráfico de intranet TCP de su elección aprovechando el acceso de escritura en el servidor FTP de intranet. • http://lists.apple.com/archives/security-announce/2010//Dec/msg00001.html http://support.apple.com/kb/HT4298 http://www.securitytracker.com/id?1024907 • CWE-264: Permissions, Privileges, and Access Controls •
CVSS: 7.1EPSS: 0%CPEs: 12EXPL: 0CVE-2010-1804
https://notcve.org/view.php?id=CVE-2010-1804
Unspecified vulnerability in the network bridge functionality on the Apple Time Capsule, AirPort Extreme Base Station, and AirPort Express Base Station with firmware before 7.5.2 allows remote attackers to cause a denial of service (networking outage) via a crafted DHCP reply. Vulnerabilidad no especificada en la funcionalidad network bridge en Apple Time Capsule, AirPort Extreme Base Station, y AirPort Express Base Station con firmware anterior a v7.5.2 permite a los atacantes remotos causar una denegcaión de servicio (desconexión de red) a través de peticiones DHCP manipuladas. • http://lists.apple.com/archives/security-announce/2010//Dec/msg00001.html http://support.apple.com/kb/HT4298 http://www.securitytracker.com/id?1024907 •
CVSS: 6.1EPSS: 0%CPEs: 12EXPL: 0CVE-2009-2189
https://notcve.org/view.php?id=CVE-2009-2189
The ICMPv6 implementation on the Apple Time Capsule, AirPort Extreme Base Station, and AirPort Express Base Station with firmware before 7.5.2 does not limit the rate of (1) Router Advertisement and (2) Neighbor Discovery packets, which allows remote attackers to cause a denial of service (resource consumption and device restart) by sending many packets. La implementación ICMPv6 en Apple Time Capsule, AirPort Extreme Base Station, y AirPort Express Base Station con firmware anterior a v7.5.2 no limita la tasa de paquetes (1) Router Advertisement y (2) Neighbor Discovery, lo cual permite a los atacantes remotos causar una denegación de servicio (consumo de recursos y reinicio del dispositivo) a través del envío de muchos paquetes. • http://lists.apple.com/archives/security-announce/2010//Dec/msg00001.html http://support.apple.com/kb/HT4298 http://www.securitytracker.com/id?1024907 • CWE-399: Resource Management Errors •