CVE-2009-2189: Medium severity apple airport express base station firmware vulnerability
The ICMPv6 implementation on the Apple Time Capsule, AirPort Extreme Base Station, and AirPort Express Base Station with firmware before 7.5.2 does not limit the rate of (1) Router Advertisement and (2) Neighbor Discovery packets, which allows remote attackers to cause a denial of service (resource consumption and device restart) by sending many packets.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2009-2189?
CVE-2009-2189 is classified as a denial of service vulnerability due to its impact on network functionality.
How do I fix CVE-2009-2189?
To fix CVE-2009-2189, upgrade the firmware of Apple Time Capsule, AirPort Extreme Base Station, or AirPort Express Base Station to version 7.5.2 or later.
Which devices are affected by CVE-2009-2189?
CVE-2009-2189 affects Apple Time Capsule, AirPort Extreme Base Station, and AirPort Express Base Station with firmware versions prior to 7.5.2.
What do the symptoms of CVE-2009-2189 look like?
Symptoms of CVE-2009-2189 may include network instability and degraded performance due to excessive Router Advertisement and Neighbor Discovery packets.
Is there a patch available for CVE-2009-2189?
Yes, a patch is available in the firmware update released by Apple, specifically version 7.5.2 and above.