F5 Big-IP WebSafe

BIG-IP Configuration Utility vulnerability

BIG-IP Configuration utility unauthenticated remote code execution vulnerability

Virtual servers in F5 BIG-IP systems 11.5.0, 11.5.1 before HF11, 11.5.2, 11.5.3, 11.5.4 before HF2, 11.6.0 before HF8, 11.6.1 before HF1, 12.0.0 before HF4, and 12.1.0 before HF2, when configured with the HTTP Explicit Proxy functionality or SOCKS profile, allow remote attackers to modify the system configuration, read system files, and possibly execute arbitrary code via unspecified vectors.

In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, GTM, Link Controller, PEM, and WebSafe 11.5.1 HF6 through 11.5.4 HF4, 11.6.0 through 11.6.1 HF1, and 12.0.0 through 12.1.2 on VIPRION platforms only, the script which synchronizes SafeNet External Network HSM configuration elements between blades in a clustered deployment will log the HSM partition password in cleartext to the "/var/log/ltm" log file.

In some circumstances, an F5 BIG-IP version 12.0.0 to 12.1.2 and 13.0.0 Azure cloud instance may contain a default administrative password which could be used to remotely log into the BIG-IP system. The impacted administrative account is the Azure instance administrative user that was created at deployment. The root and admin accounts are not vulnerable. An attacker may be able to remotely access the BIG-IP host via SSH.

In F5 BIG-IP 13.0.0, 12.1.0-12.1.2, 11.6.1, 11.5.1-11.5.5, or 11.2.1 the Apache modules apache_auth_token_mod and mod_auth_f5_auth_token.cpp allow possible unauthenticated bruteforce on the em_server_ip authorization parameter to obtain which SSL client certificates used for mutual authentication between BIG-IQ or Enterprise Manager (EM) and managed BIG-IP devices.

In some circumstances, the Traffic Management Microkernel (TMM) does not properly handle certain malformed Websockets requests/responses, which allows remote attackers to cause a denial-of-service (DoS) or possible remote code execution on the F5 BIG-IP system running versions 13.0.0 - 13.1.0.3 or 12.1.0 - 12.1.3.1.

iControl REST vulnerability

TMM Vulnerability

BIG-IP message routing vulnerability

BIG-IP iControl REST and tmsh vulnerability

BIG-IP Configuration utility authenticated SQL injection vulnerability

In F5 BIG-IP 12.0.0 through 12.1.2, an authenticated attacker may be able to cause an escalation of privileges through a crafted iControl REST connection.

BIG-IP and BIG-IQ Configuration utility vulnerability

Appliance mode BIG-IP iControl REST and tmsh vulnerability

Knowledge Appliance mode iControl REST vulnerability

Appliance mode iControl REST vulnerability

BIG-IP Configuration utility vulnerability

BIG-IP TMM vulnerability

BIG-IP HSB vulnerability

BIG-IP PEM iRules vulnerability

BIG-IP HTTP/2 vulnerability

BIG-IP SSL/TLS vulnerability

BIG-IP DTLS Vulnerability

BIG-IP DNS Cache vulnerability

BIG-IP TMM Vulnerability

BIG-IP SIP profile vulnerability

BIG-IP SSL/TLS vulnerability

BIG-IP SNMP vulnerability

BIG-IP MPTCP vulnerability

BIG-IP SCP and SFTP vulnerability

BIG-IP Appliance mode external monitor vulnerability

BIG-IP iRules vulnerability

BIG-IP HTTP/2 vulnerability

BIG-IP SIP ALG profile vulnerability

BIG-IP HTTP/2 vulnerability

SCTP Vulnerability

BIG-IP iControl SOAP vulnerability

iControl REST and TMSH vulnerability

BIG-IP iControl SOAP vulnerability