Command injection

2010-12-2203:00:00

PRIOn knowledge base

www.prio-n.com

7.2 High

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

69.1%

JSON

The Application-Level Gateway (ALG) on the Apple Time Capsule, AirPort Extreme Base Station, and AirPort Express Base Station with firmware before 7.5.2 modifies PORT commands in incoming FTP traffic, which allows remote attackers to use the device’s IP address for arbitrary intranet TCP traffic by leveraging write access to an intranet FTP server.

CPENameOperatorVersion
airport_express_base_station_firmwarele7.4.2
airport_express_base_station_firmwareeq3.84
airport_express_base_station_firmwareeq4.0.9
airport_express_base_station_firmwareeq6.1
airport_express_base_station_firmwareeq6.3
airport_express_base_station_firmwareeq7.3.2
airport_express_base_station_firmwareeq7.4.1
airport_extreme_base_station_firmwareeq5.5
airport_extreme_base_station_firmwareeq5.7

Name	Operator	Version
airport_express_base_station_firmware	le	7.4.2
airport_express_base_station_firmware	eq	3.84
airport_express_base_station_firmware	eq	4.0.9
airport_express_base_station_firmware	eq	6.1
airport_express_base_station_firmware	eq	6.3
airport_express_base_station_firmware	eq	7.3.2
airport_express_base_station_firmware	eq	7.4.1
airport_extreme_base_station_firmware	eq	5.5
airport_extreme_base_station_firmware	eq	5.7