Unscored severity · published Mar 8, 2007
CVE-2007-1338
The default configuration of the AirPort utility in Apple AirPort Extreme creates an IPv6 tunnel but does not enable the "Block incoming IPv6 connections" setting, which might…
–
CVSS
2.7%
EPSS
No
On KEV
Description
The default configuration of the AirPort utility in Apple AirPort Extreme creates an IPv6 tunnel but does not enable the "Block incoming IPv6 connections" setting, which might allow remote attackers to bypass intended access restrictions by establishing IPv6 sessions that would have been rejected over IPv4.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.7% · higher than 86% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AE
Airport Extreme · Apple
7.1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-1338
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-1338
arstechnica.com
http://arstechnica.com/journals/apple.ars/2007/2/14/7063
docs.info.apple.com
http://docs.info.apple.com/article.html?artnum=305366
lists.apple.com
http://lists.apple.com/archives/security-announce/2007/Apr/msg00000.html
osvdb.org
http://osvdb.org/34843
secunia.com
http://secunia.com/advisories/24830
www.securitytracker.com
http://www.securitytracker.com/id?1017889
More from Airport Extreme
–
CVE-2009-2189
The ICMPv6 implementation on the Apple Time Capsule, AirPort Extreme Base Station, and AirPort Express Base Station with firmware before 7.5.2 does not limit the rate of (1)…
–
CVE-2010-1804
Unspecified vulnerability in the network bridge functionality on the Apple Time Capsule, AirPort Extreme Base Station, and AirPort Express Base Station with firmware before 7.5.2…
–
CVE-2010-0039
The Application-Level Gateway (ALG) on the Apple Time Capsule, AirPort Extreme Base Station, and AirPort Express Base Station with firmware before 7.5.2 modifies PORT commands in…
–
CVE-2010-0962
The FTP proxy server in Apple AirPort Express, AirPort Extreme, and Time Capsule with firmware 7.5 does not restrict the IP address and port specified in a PORT command from a…
–
CVE-2005-3714
The network interface for Apple AirPort Express 6.x before Firmware Update 6.3, and AirPort Extreme 5.x before Firmware Update 5.7, allows remote attackers to cause a denial of…