Lucene search

AppleCVE-2019-8578

HistoryOct 27, 2020 - 8:15 p.m.

CVE-2019-8578

2020-10-2720:15:15

CWE-416

apple

web.nvd.nist.gov

cve-2019-8578

use after free

memory management

airport base station

firmware update

arbitrary code execution

nvd

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

8.4

Confidence

High

EPSS

0.01

Percentile

83.5%

JSON

A use after free issue was addressed with improved memory management. This issue is fixed in AirPort Base Station Firmware Update 7.8.1, AirPort Base Station Firmware Update 7.9.1. A remote attacker may be able to cause arbitrary code execution.

Affected configurations

Nvd

Vulners

Node

appleairport_base_station_firmwareRange<7.8.1

VendorProductVersionCPE
appleairport_base_station_firmware*cpe:2.3:o:apple:airport_base_station_firmware:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
apple	airport_base_station_firmware	*	cpe:2.3:o:apple:airport_base_station_firmware::::::::

CNA Affected

[
  {
    "product": "AirPort Base Station Firmware Update",
    "vendor": "Apple",
    "versions": [
      {
        "lessThan": "7.9",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "AirPort Base Station Firmware Update",
    "vendor": "Apple",
    "versions": [
      {
        "lessThan": "7.8",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

References

support.apple.com/en-us/HT210090

support.apple.com/en-us/HT210091

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

8.4

Confidence

High

EPSS

0.01

Percentile

83.5%

JSON

Related for CVE-2019-8578