PT-2020-11268 · Apple · Airport Base Station Firmware

Francesco Ferretti + 1 · Published 2020-10-27 · Updated 2020-10-30 · CVE-2019-8575

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions AirPort Base Station Firmware versions prior to 7.8.1 AirPort Base Station Firmware versions prior to 7.9.1

Description The issue concerns the incomplete deletion of user information during a base station factory reset. This problem has been addressed with improved data deletion.

Recommendations For AirPort Base Station Firmware versions prior to 7.8.1, update to AirPort Base Station Firmware Update 7.8.1 to resolve the issue. For AirPort Base Station Firmware versions prior to 7.9.1, update to AirPort Base Station Firmware Update 7.9.1 to resolve the issue.

Fix

Related Identifiers

CVE-2019-8575

Affected Products

Airport Base Station Firmware

References · 4

• https://support.apple.com/en-us/HT210091 · Vendor Advisory
• https://support.apple.com/en-us/HT210090 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2019-8575 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-8575 · Security Note