Remote Denial of Service Vulnerability in Apple AirPort Base Station Firmware
CVE-2019-8588

7.5HIGH

Key Information:

Vendor

Apple
Status
Airport Base Station Firmware Update
Vendor
CVE Published:
27 October 2020

What is CVE-2019-8588?

A null pointer dereference vulnerability allows a remote attacker to potentially exploit the affected AirPort Base Station firmware, possibly leading to a system denial of service. This issue has been resolved through improved input validation in the firmware updates to prevent unauthorized access and ensure the stability of the device.

Affected Version(s)

AirPort Base Station Firmware Update < 7.9

AirPort Base Station Firmware Update < 7.8

References

https://support.apple.com/en-us/HT210090
x_refsource_MISC
https://support.apple.com/en-us/HT210091
x_refsource_MISC

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2019-8588 : Remote Denial of Service Vulnerability in Apple AirPort Base Station Firmware