Lucene search

AppleCVE-2019-8572

HistoryOct 27, 2020 - 8:15 p.m.

CVE-2019-8572

2020-10-2720:15:15

CWE-476

apple

web.nvd.nist.gov

cve-2019-8572

null pointer dereference

input validation

arbitrary code execution

airport base station firmware update

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

8.3

Confidence

High

EPSS

0.01

Percentile

83.5%

JSON

A null pointer dereference was addressed with improved input validation. This issue is fixed in AirPort Base Station Firmware Update 7.8.1, AirPort Base Station Firmware Update 7.9.1. A remote attacker may be able to cause arbitrary code execution.

Affected configurations

Nvd

Vulners

Node

appleairport_base_station_firmwareRange<7.8.1

VendorProductVersionCPE
appleairport_base_station_firmware*cpe:2.3:o:apple:airport_base_station_firmware:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
apple	airport_base_station_firmware	*	cpe:2.3:o:apple:airport_base_station_firmware::::::::

CNA Affected

[
  {
    "product": "AirPort Base Station Firmware Update",
    "vendor": "Apple",
    "versions": [
      {
        "lessThan": "7.9",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "AirPort Base Station Firmware Update",
    "vendor": "Apple",
    "versions": [
      {
        "lessThan": "7.8",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

References

support.apple.com/en-us/HT210090

support.apple.com/en-us/HT210091

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

8.3

Confidence

High

EPSS

0.01

Percentile

83.5%

JSON

Related for CVE-2019-8572