CVE-2009-2189

CVE-2009-2189 describes a denial-of-service vulnerability in Apple Time Capsule, AirPort Extreme, and AirPort Express Base Stations running firmware older than 7.5.2. The flaw stems from the ICMPv6 implementation failing to rate-limit Router Advertisement and Neighbor Discovery packets. An attacker on the local network can exploit this by sending a flood of these packets, leading to resource exhaustion and device restarts. While the CVSS score of 6.1 indicates a medium severity, there is no evidence of active exploitation, public exploit code, or significant community discussion beyond a single Reddit mention.