F5 Networks, Inc. vulnerabilities, page 5

109 vulnerabilities

Known vulnerabilities in F5 Networks, Inc. products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 58 products.

5.9MediumCVE-2017-6141f5 networks, inc. · f5 big-ip ltm, aam, afm, apm, asm, link controller, pem, websafe +8 moref5 networks, inc. f5 big-ip ltm, aam, afm, apm, asm, link controller, pem, websafeIn F5 BIG-IP LTM, AAM, AFM, APM, ASM, Link Controller, PEM, and WebSafe 12.1.0 through 12.1.2, certain values in a TLS abbreviated handshake when using a client SSL profile with the Session Ticket option enabled may cause disruption of service to the Traffic Management Microkernel (TMM). The Session Ticket option is disabled by default.EPSS1.06%5.9MediumCVE-2017-6136f5 networks, inc. · big-ip ltm, aam, afm, analytics, apm, asm, dns, gtm, link controller, pem, websafe +11 moref5 networks, inc. big-ip ltm, aam, afm, analytics, apm, asm, dns, gtm, link controller, pem, websafeIn F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, GTM, Link Controller, PEM and WebSafe software version 13.0.0 and 12.0.0 - 12.1.2, undisclosed traffic patterns sent to BIG-IP virtual servers, with the TCP Fast Open and Tail Loss Probe options enabled in the associated TCP profile, may cause a disruption of service to the Traffic Management Microkernel (TMM).EPSS1.41%7.8HighCVE-2017-6150f5 networks, inc. · big-ip ltm, aam, afm, analytics, apm, asm, dns, link controller, pem, websafe +10 moref5 networks, inc. big-ip ltm, aam, afm, analytics, apm, asm, dns, link controller, pem, websafeUnder certain conditions for F5 BIG-IP systems 13.0.0 or 12.1.0 - 12.1.3.1, using FastL4 profiles, when the Reassemble IP Fragments option is disabled (default), some specific large fragmented packets may restart the Traffic Management Microkernel (TMM).EPSS1.74%7.8HighCVE-2017-6133f5 networks, inc. · big-ip ltm, aam, afm, analytics, apm, asm, dns, link controller, pem, websafe +10 moref5 networks, inc. big-ip ltm, aam, afm, analytics, apm, asm, dns, link controller, pem, websafeIn F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Link Controller, PEM and WebSafe software version 13.0.0 and 12.1.0 - 12.1.2, undisclosed HTTP requests may cause a denial of service.EPSS2.36%5.9MediumCVE-2017-6139f5 networks, inc. · big-ip (apm) +1 moref5 networks, inc. big-ip (apm)In F5 BIG-IP APM software version 13.0.0 and 12.1.2, under rare conditions, the BIG-IP APM system appends log details when responding to client requests. Details in the log file can vary; customers running debug mode logging with BIG-IP APM are at highest risk.EPSS1.70%6.8MediumCVE-2017-6169f5 networks, inc. · big-ip pem +1 moref5 networks, inc. big-ip pemIn versions 13.0.0, 12.0.0-12.1.3, or 11.6.0-11.6.2, an F5 BIG-IP virtual server using the URL categorization feature may cause the Traffic Management Microkernel (TMM) to produce a core file when it receives malformed URLs during categorization.EPSS1.42%7.5HighCVE-2017-6128f5 networks, inc. · big-ip ltm, aam, afm, analytics, apm, asm, edge gateway, gtm, link controller, pem, psm, webaccelerator, websafe +24 moref5 networks, inc. big-ip ltm, aam, afm, analytics, apm, asm, edge gateway, gtm, link controller, pem, psm, webaccelerator, websafeAn attacker may be able to cause a denial-of-service (DoS) attack against the sshd component in F5 BIG-IP, Enterprise Manager, BIG-IQ, and iWorkflow.EPSS1.40%5.9MediumCVE-2017-6162f5 networks, inc. · big-ip ltm, aam, afm, analytics, apm, asm, dns, edge gateway, gtm, link controller, pem, websafe +8 moref5 networks, inc. big-ip ltm, aam, afm, analytics, apm, asm, dns, edge gateway, gtm, link controller, pem, websafeIn F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, GTM, Link Controller, PEM, Websafe software version 12.0.0 to 12.1.2, 11.6.0 to 11.6.1, 11.4.0 to 11.5.4, 11.2.1, in some cases TMM may crash when processing TCP traffic. This vulnerability affects TMM via a virtual server configured with TCP profile. Traffic processing is disrupted while Traffic Management Microkernel (TMM) restarts. If the affected BIG-IP system is configured to be part of a device group, it will trigger a failover to the peer device.EPSS1.67%7.5HighCVE-2017-6140f5 networks, inc. · big-ip ltm, aam, afm, analytics, asm, dns, gtm, pem +8 moref5 networks, inc. big-ip ltm, aam, afm, analytics, asm, dns, gtm, pemOn the BIG-IP 2000s, 2200s, 4000s, 4200v, i5600, i5800, i7600, i7800, i10600,i10800, and VIPRION 4450 blades, running version 11.5.0, 11.5.1, 11.5.2, 11.5.3, 11.5.4, 11.6.0, 11.6.1, 12.0.0, 12.1.0, 12.1.1 or 12.1.2 of BIG-IP LTM, AAM, AFM, Analytics, ASM, DNS, GTM or PEM, an undisclosed sequence of packets sent to Virtual Servers with client or server SSL profiles may cause disruption of data plane services.EPSS1.58%7.5HighCVE-2017-6154f5 networks, inc. · big-ip asm +1 moref5 networks, inc. big-ip asmOn F5 BIG-IP systems running 13.0.0, 12.1.0 - 12.1.3.1, or 11.6.1 - 11.6.2, the BIG-IP ASM bd daemon may core dump memory under some circumstances when processing undisclosed types of data on systems with 48 or more CPU cores.EPSS1.66%9.8CriticalCVE-2017-6165f5 networks, inc. · f5 big-ip ltm, aam, afm, analytics, apm, asm, dns, gtm, link controller, pem, websafe +11 moref5 networks, inc. f5 big-ip ltm, aam, afm, analytics, apm, asm, dns, gtm, link controller, pem, websafeIn F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, GTM, Link Controller, PEM, and WebSafe 11.5.1 HF6 through 11.5.4 HF4, 11.6.0 through 11.6.1 HF1, and 12.0.0 through 12.1.2 on VIPRION platforms only, the script which synchronizes SafeNet External Network HSM configuration elements between blades in a clustered deployment will log the HSM partition password in cleartext to the "/var/log/ltm" log file.EPSS1.93%5.8MediumCVE-2017-6142f5 networks, inc. · big-ip afm +1 moref5 networks, inc. big-ip afmX509 certificate verification was not correctly implemented in the early access "user id" feature in the F5 BIG-IP Advanced Firewall Manager versions 13.0.0, 12.1.0-12.1.2, and 11.6.0-11.6.2, and thus did not properly validate the remote server's identity on certain versions of BIG-IP.EPSS0.40%7.8HighCVE-2017-6129f5 networks, inc. · big-ip (apm) +1 moref5 networks, inc. big-ip (apm)In F5 BIG-IP APM software version 13.0.0 and 12.1.2, in some circumstances, APM tunneled VPN flows can cause a VPN/PPP connflow to be prematurely freed or cause TMM to stop responding with a "flow not in use" assertion. An attacker may be able to disrupt traffic or cause the BIG-IP system to fail over to another device in the device group.EPSS1.64%5.9MediumCVE-2017-6159f5 networks, inc. · big-ip ltm, aam, afm, analytics, apm, asm, dns, gtm, link controller, pem, websafe +8 moref5 networks, inc. big-ip ltm, aam, afm, analytics, apm, asm, dns, gtm, link controller, pem, websafeF5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, GTM, Link Controller, PEM, Websafe software version 12.0.0 to 12.1.2, 11.6.0 to 11.6.1 are vulnerable to a denial of service attack when the MPTCP option is enabled on a virtual server. Data plane is vulnerable when using the MPTCP option of a TCP profile. There is no control plane exposure. An attacker may be able to disrupt services by causing TMM to restart hence temporarily failing to process traffic.EPSS1.59%7.5HighCVE-2017-6145f5 networks, inc. · f5 big-ip ltm, aam, afm, analytics, apm, asm, dns, link controller, pem, websafe +10 moref5 networks, inc. f5 big-ip ltm, aam, afm, analytics, apm, asm, dns, link controller, pem, websafeiControl REST in F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Link Controller, PEM, and WebSafe 12.0.0 through 12.1.2 and 13.0.0 includes a service to convert authorization BIGIPAuthCookie cookies to X-F5-Auth-Token tokens. This service does not properly re-validate cookies when making that conversion, allowing once-valid but now expired cookies to be converted to valid tokens.EPSS1.05%6.7MediumCVE-2017-6152f5 networks, inc. · big-iq centralized management +1 moref5 networks, inc. big-iq centralized managementA local user on F5 BIG-IQ Centralized Management 5.1.0-5.2.0 with the Access Manager role has privileges to change the passwords of other users on the system, including the local admin account password.EPSS0.30%5.9MediumCVE-2017-6137f5 networks, inc. · big-ip ltm, aam, afm, analytics, apm, asm, dns, edge gateway, gtm, link controller, pem, psm, webaccelerator, websafe +11 moref5 networks, inc. big-ip ltm, aam, afm, analytics, apm, asm, dns, edge gateway, gtm, link controller, pem, psm, webaccelerator, websafeIn F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, GTM, Link Controller, PEM, PSM, WebAccelerator, and WebSafe 11.6.1 HF1, 12.0.0 HF3, 12.0.0 HF4, and 12.1.0 through 12.1.2, undisclosed traffic patterns received while software SYN cookie protection is engaged may cause a disruption of service to the Traffic Management Microkernel (TMM) on specific platforms and configurations.EPSS1.09%7.4HighCVE-2017-6144f5 networks, inc. · f5 big-ip pem +1 moref5 networks, inc. f5 big-ip pemIn F5 BIG-IP PEM 12.1.0 through 12.1.2 when downloading the Type Allocation Code (TAC) database file via HTTPS, the server's certificate is not verified. Attackers in a privileged network position may be able to launch a man-in-the-middle attack against these connections. TAC databases are used in BIG-IP PEM for Device Type and OS (DTOS) and Tethering detection. Customers not using BIG-IP PEM, not configuring downloads of TAC database files, or not using HTTP for that download are not affected.EPSS0.60%5.3MediumCVE-2017-6161f5 networks, inc. · big-ip ltm, aam, afm, analytics, apm, asm, dns, edge gateway, gtm, link controller, pem, webaccelerator +11 moref5 networks, inc. big-ip ltm, aam, afm, analytics, apm, asm, dns, edge gateway, gtm, link controller, pem, webacceleratorIn F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, GTM, Link Controller, PEM, WebAccelerator software version 12.0.0 - 12.1.2, 11.6.0 - 11.6.1, 11.4.0 - 11.5.4, 11.2.1, when ConfigSync is configured, attackers on adjacent networks may be able to bypass the TLS protections usually used to encrypted and authenticate connections to mcpd. This vulnerability may allow remote attackers to cause a denial-of-service (DoS) attack via resource exhaustion.EPSS0.97%6.5MediumCVE-2017-6134f5 networks, inc. · big-ip ltm, aam, afm, analytics, apm, asm, dns, gtm, link controller, pem, websafe +11 moref5 networks, inc. big-ip ltm, aam, afm, analytics, apm, asm, dns, gtm, link controller, pem, websafeIn F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, GTM, Link Controller, PEM and WebSafe software version 13.0.0, 12.1.0 - 12.1.2 and 11.5.1 - 11.6.1, an undisclosed sequence of packets, sourced from an adjacent network may cause TMM to crash.EPSS0.87%