CVE-2015-7029 is a critical vulnerability affecting Apple AirPort Base Station Firmware versions prior to 7.6.7 and 7.7.7. This flaw stems from improper DNS data parsing, enabling remote attackers to execute arbitrary code or trigger a denial of service through memory corruption. With a CVSS score of 9.8, it poses a severe risk due to its network-based attack vector, low complexity, and high impact on confidentiality, integrity, and availability. While no public exploit code (Metasploit, Nuclei, ExploitDB) is readily available and it's not listed in CISA's KEV catalog, its high FAUCET Risk Score and mention in media coverage suggest its significance.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
<= 7.6.4CPE matchmatch criteria | cpe:2.3:o:apple:airport_base_station_firmware:*:*:*:*:*:*:*:* | ||
7.7.0CPE matchmatch criteria | cpe:2.3:o:apple:airport_base_station_firmware:7.7.0:*:*:*:*:*:*:* | ||
7.7.3CPE matchmatch criteria | cpe:2.3:o:apple:airport_base_station_firmware:7.7.3:*:*:*:*:*:*:* |
CVSS version used by this source: 3.0
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
No social media mentions found for this CVE.
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.3 Bluesky, 0.3 Mastodon, and 2.4 GitHub mentions.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.