Lucene search

K
cve[email protected]CVE-2003-0270
HistoryJun 16, 2003 - 4:00 a.m.

CVE-2003-0270

2003-06-1604:00:00
NVD-CWE-Other
web.nvd.nist.gov
32
2
apple airport
802.11
wireless access point
weak encryption
authentication credentials
remote attackers
administrative access
sniffing
ethernet
non-wep connections

6.7 Medium

AI Score

Confidence

Low

7.6 High

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:H/Au:N/C:C/I:C/A:C

0.028 Low

EPSS

Percentile

90.7%

The administration capability for Apple AirPort 802.11 wireless access point devices uses weak encryption (XOR with a fixed key) for protecting authentication credentials, which could allow remote attackers to obtain administrative access via sniffing when the capability is available via Ethernet or non-WEP connections.

CPENameOperatorVersion
apple:802.11napple 802.11neq7.3.1

Social References

More

6.7 Medium

AI Score

Confidence

Low

7.6 High

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:H/Au:N/C:C/I:C/A:C

0.028 Low

EPSS

Percentile

90.7%

Related for CVE-2003-0270