Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

apple time capsule vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2010-0962
The FTP proxy server in Apple AirPort Express, AirPort Extreme, and Time Capsule with firmware 7.5 does not restrict the IP address and port specified in a PORT command from a client, which allows remote malicious users to leverage intranet FTP servers for arbitrary TCP forwardin...
Apple Airport Express 7.5Apple Airport Extreme 7.5Apple Time Capsule 7.5
NA
CVE-2012-0675
Time Machine in Apple Mac OS X prior to 10.7.4 does not require continued use of SRP-based authentication after this authentication method is first used, which allows remote malicious users to read Time Capsule credentials by spoofing the backup volume.
Apple Mac Os X 10.6.3Apple Mac Os X 10.6.7Apple Mac Os X 10.5.1Apple Mac Os X 10.5.6Apple Mac Os X 10.5.5Apple Mac Os X 10.5.2Apple Mac Os X 10.4.6Apple Mac Os X 10.4.5Apple Mac Os X 10.3.2Apple Mac Os X 10.3.3Apple Mac Os X 10.3.8Apple Mac Os X 10.2.1Apple Mac Os X 10.2.0Apple Mac Os X 10.2Apple Mac Os X 10.1.5Apple Mac Os X 10.0.0Apple Mac Os X 10.6.0Apple Mac Os X 10.6.6Apple Mac Os X 10.5.3Apple Mac Os X 10.5.0Apple Mac Os X 10.4.4Apple Mac Os X 10.4.3
NA
CVE-2010-1804
Unspecified vulnerability in the network bridge functionality on the Apple Time Capsule, AirPort Extreme Base Station, and AirPort Express Base Station with firmware prior to 7.5.2 allows remote malicious users to cause a denial of service (networking outage) via a crafted DHCP r...
Apple Airport Express Base Station Firmware 6.3Apple Airport Express Base Station FirmwareApple Airport Extreme Base Station Firmware 5.5Apple Airport Express Base Station Firmware 4.0.9Apple Airport Express Base Station Firmware 3.84Apple Airport Extreme Base Station Firmware 5.7Apple Airport Express Base Station Firmware 6.1Apple Airport Express Base Station Firmware 7.4.1Apple Airport Express Base Station Firmware 7.3.2Apple Airport ExpressApple Time CapsuleApple Airport Extreme
NA
CVE-2009-2189
The ICMPv6 implementation on the Apple Time Capsule, AirPort Extreme Base Station, and AirPort Express Base Station with firmware prior to 7.5.2 does not limit the rate of (1) Router Advertisement and (2) Neighbor Discovery packets, which allows remote malicious users to cause a ...
Apple Airport Express Base Station FirmwareApple Airport Express Base Station Firmware 7.4.1Apple Airport Express Base Station Firmware 7.3.2Apple Airport Express Base Station Firmware 4.0.9Apple Airport Extreme Base Station Firmware 5.5Apple Airport Extreme Base Station Firmware 5.7Apple Airport Express Base Station Firmware 3.84Apple Airport Express Base Station Firmware 6.1Apple Airport Express Base Station Firmware 6.3Apple Airport ExpressApple Time CapsuleApple Airport Extreme
NA
CVE-2010-0039
The Application-Level Gateway (ALG) on the Apple Time Capsule, AirPort Extreme Base Station, and AirPort Express Base Station with firmware prior to 7.5.2 modifies PORT commands in incoming FTP traffic, which allows remote malicious users to use the device's IP address for a...
Apple Airport Express Base Station Firmware 7.3.2Apple Airport Express Base Station Firmware 4.0.9Apple Airport Extreme Base Station Firmware 5.7Apple Airport Express Base Station Firmware 6.1Apple Airport Express Base Station Firmware 6.3Apple Airport Express Base Station FirmwareApple Airport Express Base Station Firmware 7.4.1Apple Airport Extreme Base Station Firmware 5.5Apple Airport Express Base Station Firmware 3.84Apple Time CapsuleApple Airport ExtremeApple Airport Express
NA
CVE-2011-3462
Time Machine in Apple Mac OS X prior to 10.7.3 does not verify the unique identifier of its remote AFP volume or Time Capsule, which allows remote malicious users to obtain sensitive information contained in new backups by spoofing this storage object, a different vulnerability t...
Apple Mac Os X 10.7.1Apple Mac Os XApple Mac Os X 10.7.0Apple Mac Os X Server 10.7.0Apple Mac Os X Server 10.7.1Apple Mac Os X Server
7.5
CVSSv3
CVE-2014-0160
The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 prior to 1.0.1g do not properly handle Heartbeat Extension packets, which allows remote malicious users to obtain sensitive information from process memory via crafted packets that trigger a buffer over-read, as demonstrat...
Openssl OpensslFilezilla-project Filezilla ServerSiemens Application Processing Engine Firmware 2.0Siemens Cp 1543-1 Firmware 1.1Siemens Simatic S7-1500 Firmware 1.5Siemens Simatic S7-1500t Firmware 1.5Siemens Elan-8.2Siemens Wincc Open Architecture 3.12Intellian V100 Firmware 1.20Intellian V100 Firmware 1.21Intellian V100 Firmware 1.24Intellian V60 Firmware 1.15Intellian V60 Firmware 1.25Mitel Micollab 6.0Mitel Micollab 7.0Mitel Micollab 7.1Mitel Micollab 7.2Mitel Micollab 7.3.0.104Mitel Micollab 7.3Mitel Mivoice 1.1.3.3Mitel Mivoice 1.2.0.11Mitel Mivoice 1.3.2.2
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-27322administrator privilegesCVE-2024-1579hardcodedCVE-2023-20198CVE-2024-33587CVE-2024-33449CVE-2024-4308HTML injection
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook