PT-2020-11271 · Apple · Airport Base Station Firmware

Maxime Villard · Published 2020-10-27 · Updated 2020-10-30 · CVE-2019-8580

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions AirPort Base Station Firmware versions prior to 7.8.1 AirPort Base Station Firmware versions prior to 7.9.1

Description The issue concerns the unexpected acceptance of source-routed IPv4 packets, which were disabled by default.

Recommendations For AirPort Base Station Firmware versions prior to 7.8.1, update to AirPort Base Station Firmware Update 7.8.1. For AirPort Base Station Firmware versions prior to 7.9.1, update to AirPort Base Station Firmware Update 7.9.1.

Fix

Related Identifiers

CVE-2019-8580

Affected Products

Airport Base Station Firmware

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2019-8580 · Security Note
• https://support.apple.com/en-us/HT210090 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2019-8580 · Vendor Advisory
• https://support.apple.com/en-us/HT210091 · Vendor Advisory