CVE-2009-2189
Estado: ModificadaMedia (6.1)—
The ICMPv6 implementation on the Apple Time Capsule, AirPort Extreme Base Station, and AirPort Express Base Station with firmware before 7.5.2 does not limit the rate of (1) Router Advertisement and (2) Neighbor Discovery packets, which allows remote attackers to cause a denial of service (resource consumption and device restart) by sending many packets.
CVSS
- Versión: 2.0
- Vector: AV:A/AC:L/Au:N/C:N/I:N/A:C
- Puntuación base: 6.1
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 0.82%
- Percentil entre todas las CVEs puntuadas: 56
- Fecha de la puntuación: 2/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (5)
CWE
- CWE-399
Referencias
JSON original (NVD)
Mostrar
{
"id": "CVE-2009-2189",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 6.1,
"accessVector": "ADJACENT_NETWORK",
"vectorString": "AV:A/AC:L/Au:N/C:N/I:N/A:C",
"authentication": "NONE",
"integrityImpact": "NONE",
"accessComplexity": "LOW",
"availabilityImpact": "COMPLETE",
"confidentialityImpact": "NONE"
},
"acInsufInfo": false,
"impactScore": 6.9,
"baseSeverity": "MEDIUM",
"obtainAllPrivilege": false,
"exploitabilityScore": 6.5,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
]
},
"affected": [
{
"source": "cve@mitre.org",
"affectedData": [
{
"vendor": "n/a",
"product": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
]
}
],
"published": "2010-12-22T03:00:01.347",
"references": [
{
"url": "http://lists.apple.com/archives/security-announce/2010//Dec/msg00001.html",
"tags": [
"Patch",
"Vendor Advisory"
],
"source": "cve@mitre.org"
},
{
"url": "http://support.apple.com/kb/HT4298",
"tags": [
"Patch",
"Vendor Advisory"
],
"source": "cve@mitre.org"
},
{
"url": "http://www.securitytracker.com/id?1024907",
"source": "cve@mitre.org"
},
{
"url": "http://lists.apple.com/archives/security-announce/2010//Dec/msg00001.html",
"tags": [
"Patch",
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://support.apple.com/kb/HT4298",
"tags": [
"Patch",
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.securitytracker.com/id?1024907",
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "CWE-399"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "The ICMPv6 implementation on the Apple Time Capsule, AirPort Extreme Base Station, and AirPort Express Base Station with firmware before 7.5.2 does not limit the rate of (1) Router Advertisement and (2) Neighbor Discovery packets, which allows remote attackers to cause a denial of service (resource consumption and device restart) by sending many packets."
},
{
"lang": "es",
"value": "La implementación ICMPv6 en Apple Time Capsule, AirPort Extreme Base Station, y AirPort Express Base Station con firmware anterior a v7.5.2 no limita la tasa de paquetes (1) Router Advertisement y (2) Neighbor Discovery, lo cual permite a los atacantes remotos causar una denegación de servicio (consumo de recursos y reinicio del dispositivo) a través del envío de muchos paquetes."
}
],
"lastModified": "2026-06-16T23:08:58.013",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:apple:airport_express_base_station_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C9226648-A35A-48C7-97B2-B641AF1AC064",
"versionEndIncluding": "7.4.2"
},
{
"criteria": "cpe:2.3:h:apple:airport_express_base_station_firmware:3.84:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5BE83F1E-AE73-4EA3-BB24-00AB2CD5E5AE"
},
{
"criteria": "cpe:2.3:h:apple:airport_express_base_station_firmware:4.0.9:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EDFC5591-5F55-414F-99EC-EF560F131A01"
},
{
"criteria": "cpe:2.3:h:apple:airport_express_base_station_firmware:6.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A9263C8C-E71C-4922-ABCD-ED71AACE2C6A"
},
{
"criteria": "cpe:2.3:h:apple:airport_express_base_station_firmware:6.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "64341069-B93B-48F3-946F-4248231B6AA7"
},
{
"criteria": "cpe:2.3:h:apple:airport_express_base_station_firmware:7.3.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "508DE2BA-DCA6-4249-B534-30EEFA2548FE"
},
{
"criteria": "cpe:2.3:h:apple:airport_express_base_station_firmware:7.4.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3333BFC0-037A-4926-BCBE-C0F0C1204B89"
},
{
"criteria": "cpe:2.3:h:apple:airport_extreme_base_station_firmware:5.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3420DD2D-4B5B-4112-AE49-20FA97608495"
},
{
"criteria": "cpe:2.3:h:apple:airport_extreme_base_station_firmware:5.7:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "546C47A2-D8CE-4341-968A-051F81BAF904"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:apple:airport_express:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A2C90704-400C-4BA2-9CF5-96C3A42B620E"
},
{
"criteria": "cpe:2.3:h:apple:airport_extreme:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E0B25975-DD1E-430F-9AB0-F363E4BF743B"
},
{
"criteria": "cpe:2.3:h:apple:time_capsule:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "ECA814FD-FE33-44E3-9A40-805E6C9C4ED9"
}
],
"operator": "OR"
}
],
"operator": "AND"
}
],
"sourceIdentifier": "cve@mitre.org"
}