PT-2020-11266 · Apple · Airport Base Station Firmware

Maxime Villard · Published 2020-10-27 · Updated 2020-10-30 · CVE-2019-8572

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions AirPort Base Station Firmware versions prior to 7.8.1 AirPort Base Station Firmware versions prior to 7.9.1

Description A null pointer dereference issue was addressed through improved input validation. This issue allows a remote attacker to potentially cause arbitrary code execution.

Recommendations For AirPort Base Station Firmware versions prior to 7.8.1, update to AirPort Base Station Firmware Update 7.8.1. For AirPort Base Station Firmware versions prior to 7.9.1, update to AirPort Base Station Firmware Update 7.9.1.

Fix

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

CVE-2019-8572

Affected Products

Airport Base Station Firmware

References · 4

• https://support.apple.com/en-us/HT210091 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2019-8572 · Vendor Advisory
• https://support.apple.com/en-us/HT210090 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-8572 · Security Note