CVE-2009-2822
AirPort Utility before 5.5.1 for Apple AirPort Base Station does not properly distribute MAC...
AirPort Utility before 5.5.1 for Apple AirPort Base Station does not properly distribute MAC address ACLs to network extenders, which allows remote attackers to bypass intended access restrictions via an 802.11 authentication frame.
Exploit likelihood
What each source reports
NVD Score used
AirPort Utility before 5.5.1 for Apple AirPort Base Station does not properly distribute MAC address ACLs to network extenders, which allows remote attackers to bypass intended access restrictions via an 802.11 authentication frame.
- Record
CVE-2009-2822- CVSS 2.0
- 6.8 Medium
AV:N/AC:M/Au:N/C:P/I:P/A:P - Weakness
- CWE-264
- Updated
- 2026-11-02
CVE List No score
AirPort Utility before 5.5.1 for Apple AirPort Base Station does not properly distribute MAC address ACLs to network extenders, which allows remote attackers to bypass intended access restrictions via an 802.11 authentication frame.
- Record
CVE-2009-2822- Updated
- 2026-11-02
EUVDEUVD-2009-2812 No score
AirPort Utility before 5.5.1 for Apple AirPort Base Station does not properly distribute MAC address ACLs to network extenders, which allows remote attackers to bypass intended access restrictions via an 802.11 authentication frame.
- Record
EUVD-2009-2812- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-67rf-55wq-rpmf No score
AirPort Utility before 5.5.1 for Apple AirPort Base Station does not properly distribute MAC...
AirPort Utility before 5.5.1 for Apple AirPort Base Station does not properly distribute MAC address ACLs to network extenders, which allows remote attackers to bypass intended access restrictions via an 802.11 authentication frame.
- Record
GHSA-67rf-55wq-rpmf- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2009-2822 is a medium vulnerability (CVSS 6.8) in Apple Airport Utility, published April 5, 2010. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.54%, the 74th percentile. No source names a fixed version.