Login Request a demo
Unscored severity · published Mar 10, 2010
CVE-2010-0962
The FTP proxy server in Apple AirPort Express, AirPort Extreme, and Time Capsule with firmware 7.5 does not restrict the IP address and port specified in a PORT command from a…
–
CVSS
1.2%
EPSS
No
On KEV
Description
The FTP proxy server in Apple AirPort Express, AirPort Extreme, and Time Capsule with firmware 7.5 does not restrict the IP address and port specified in a PORT command from a client, which allows remote attackers to leverage intranet FTP servers for arbitrary TCP forwarding via a crafted PORT command.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.2% · higher than 69% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AE
Airport Express · Apple
7.5 · source: NVD
AE
Airport Extreme · Apple
7.5 · source: NVD
TC
Time Capsule · Apple
7.5 · source: NVD
Affected product
AE
Airport Express
Apple
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2010-0962
CVE.org
https://www.cve.org/CVERecord?id=CVE-2010-0962
seclists.org
http://seclists.org/fulldisclosure/2010/Mar/106
www.securityfocus.com
http://www.securityfocus.com/archive/1/509867/100/0/threaded
www.securityfocus.com
http://www.securityfocus.com/archive/1/509974/100/0/threaded
Exploit
http://www.securityfocus.com/bid/38543
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/56701
More from Airport Express
–
CVE-2009-2189
The ICMPv6 implementation on the Apple Time Capsule, AirPort Extreme Base Station, and AirPort Express Base Station with firmware before 7.5.2 does not limit the rate of (1)…
–
CVE-2010-0039
The Application-Level Gateway (ALG) on the Apple Time Capsule, AirPort Extreme Base Station, and AirPort Express Base Station with firmware before 7.5.2 modifies PORT commands in…
–
CVE-2010-1804
Unspecified vulnerability in the network bridge functionality on the Apple Time Capsule, AirPort Extreme Base Station, and AirPort Express Base Station with firmware before 7.5.2…
–
CVE-2005-3714
The network interface for Apple AirPort Express 6.x before Firmware Update 6.3, and AirPort Extreme 5.x before Firmware Update 5.7, allows remote attackers to cause a denial of…
–
CVE-2005-0289
Apple AirPort Express prior to 6.1.1 and Extreme prior to 5.5.1, configured as a Wireless Data Service (WDS), allows remote attackers to cause a denial of service (device freeze)…