Apple Airport Express vulnerabilities

3 vulnerabilities

Known vulnerabilities in Apple Airport Express, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

5CVE-2005-0289appleairport_express+1
EPSS score
1.56%
Apple AirPort Express prior to 6.1.1 and Extreme prior to 5.5.1, configured as a Wireless Data Service (WDS), allows remote attackers to cause a denial of service (device freeze) by connecting to UDP port 161 and before link-state change occurs.5CVE-2005-3714appleairport_express+1
EPSS score
1.72%
The network interface for Apple AirPort Express 6.x before Firmware Update 6.3, and AirPort Extreme 5.x before Firmware Update 5.7, allows remote attackers to cause a denial of service (unresponsive interface) via malformed packets.5CVE-2010-0962appleairport_express+2
EPSS score
1.25%
The FTP proxy server in Apple AirPort Express, AirPort Extreme, and Time Capsule with firmware 7.5 does not restrict the IP address and port specified in a PORT command from a client, which allows remote attackers to leverage intranet FTP servers for arbitrary TCP forwarding via a crafted PORT command.