PT-2020-11269 · Apple · Airport Base Station Firmware

Maxime Villard · Published 2020-10-27 · Updated 2020-10-30 · CVE-2019-8578

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions AirPort Base Station Firmware versions prior to 7.8.1 AirPort Base Station Firmware versions prior to 7.9.1

Description A use after free issue was addressed with improved memory management. A remote attacker may be able to cause arbitrary code execution.

Recommendations For AirPort Base Station Firmware versions prior to 7.8.1, update to AirPort Base Station Firmware Update 7.8.1. For AirPort Base Station Firmware versions prior to 7.9.1, update to AirPort Base Station Firmware Update 7.9.1.

Fix

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

CVE-2019-8578

Affected Products

Airport Base Station Firmware

References · 5

• https://osv.dev/vulnerability/CVE-2019-8578 · Vendor Advisory
• https://support.apple.com/en-us/HT210091 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-8578 · Security Note
• https://support.apple.com/en-us/HT210090 · Vendor Advisory
• https://t.me/cibsecurity/15649 · Telegram Post