ID CVE-2003-0270
Summary The administration capability for Apple AirPort 802.11 wireless access point devices uses weak encryption (XOR with a fixed key) for protecting authentication credentials, which could allow remote attackers to obtain administrative access via sniffing when the capability is available via Ethernet or non-WEP connections.
References
Vulnerable Configurations
  • cpe:2.3:h:apple:802.11n:7.3.1:*:*:*:*:*:*:*
    cpe:2.3:h:apple:802.11n:7.3.1:*:*:*:*:*:*:*
CVSS
Base: 7.6 (as of 11-07-2017 - 01:29)
Impact:
Exploitability:
CWE NVD-CWE-Other
CAPEC
Access
VectorComplexityAuthentication
NETWORK HIGH NONE
Impact
ConfidentialityIntegrityAvailability
COMPLETE COMPLETE COMPLETE
cvss-vector via4 AV:N/AC:H/Au:N/C:C/I:C/A:C
refmap via4
atstake A051203-1
bid 7554
sectrack 1006742
secunia 8773
xf airport-auth-credentials-disclosure(11980)
Last major update 11-07-2017 - 01:29
Published 16-06-2003 - 04:00
Last modified 11-07-2017 - 01:29
Back to Top