Lucene search
HistoryMay 12, 2014 - 2:55 p.m.
CVE-2014-2928
f5
big-ip
ltm
apm
asm
gtm
link controller
psm
aam
afm
pem
analytics
enterprise manager
big-iq cloud
device
security
remote code execution
cve-2014-2928
7.5 High
AI Score
Confidence
Low
7.1 High
CVSS2
Access Vector
Access Complexity
Authentication
SINGLE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:H/Au:S/C:C/I:C/A:C
0.624 Medium
EPSS
Percentile
97.8%
The iControl API in F5 BIG-IP LTM, APM, ASM, GTM, Link Controller, and PSM 10.0.0 through 10.2.4 and 11.0.0 through 11.5.1, BIG-IP AAM 11.4.0 through 11.5.1, BIG-IP AFM and PEM 11.3.0 through 11.5.1, BIG-IP Analytics 11.0.0 through 11.5.1, BIG-IP Edge Gateway, WebAccelerator, WOM 10.1.0 through 10.2.4 and 11.0.0 through 11.3.0, Enterprise Manager 2.1.0 through 2.3.0 and 3.0.0 through 3.1.1, and BIG-IQ Cloud, Device, and Security 4.0.0 through 4.3.0 allows remote administrators to execute arbitrary commands via shell metacharacters in the hostname element in a SOAP request.
Affected configurations
Node
f5big-ip_webacceleratorMatch9.4.0
ORf5big-ip_webacceleratorMatch9.4.1
ORf5big-ip_webacceleratorMatch9.4.2
ORf5big-ip_webacceleratorMatch9.4.3
ORf5big-ip_webacceleratorMatch9.4.4
ORf5big-ip_webacceleratorMatch9.4.5
ORf5big-ip_webacceleratorMatch9.4.6
ORf5big-ip_webacceleratorMatch9.4.7
ORf5big-ip_webacceleratorMatch9.4.8
ORf5big-ip_webacceleratorMatch10.0.0
ORf5big-ip_webacceleratorMatch10.0.1
ORf5big-ip_webacceleratorMatch10.1.0
ORf5big-ip_webacceleratorMatch10.2.0
ORf5big-ip_webacceleratorMatch10.2.1
ORf5big-ip_webacceleratorMatch10.2.2
ORf5big-ip_webacceleratorMatch10.2.3
ORf5big-ip_webacceleratorMatch10.2.4
ORf5big-ip_webacceleratorMatch11.0.0
ORf5big-ip_webacceleratorMatch11.1.0
ORf5big-ip_webacceleratorMatch11.2.0
ORf5big-ip_webacceleratorMatch11.2.1
ORf5big-ip_webacceleratorMatch11.3.0
Node
f5big-ip_local_traffic_managerMatch10.0.0
ORf5big-ip_local_traffic_managerMatch10.0.1
ORf5big-ip_local_traffic_managerMatch10.1.0
ORf5big-ip_local_traffic_managerMatch10.2.0
ORf5big-ip_local_traffic_managerMatch10.2.1
ORf5big-ip_local_traffic_managerMatch10.2.2
ORf5big-ip_local_traffic_managerMatch11.0.0
Node
f5big-ip_protocol_security_moduleMatch9.4.5
ORf5big-ip_protocol_security_moduleMatch9.4.6
ORf5big-ip_protocol_security_moduleMatch9.4.7
ORf5big-ip_protocol_security_moduleMatch9.4.8
ORf5big-ip_protocol_security_moduleMatch10.0.0
ORf5big-ip_protocol_security_moduleMatch10.0.1
ORf5big-ip_protocol_security_moduleMatch10.1.0
ORf5big-ip_protocol_security_moduleMatch10.2.0
ORf5big-ip_protocol_security_moduleMatch10.2.1
ORf5big-ip_protocol_security_moduleMatch10.2.2
ORf5big-ip_protocol_security_moduleMatch10.2.3
ORf5big-ip_protocol_security_moduleMatch10.2.4
ORf5big-ip_protocol_security_moduleMatch11.0.0
ORf5big-ip_protocol_security_moduleMatch11.1.0
ORf5big-ip_protocol_security_moduleMatch11.2.0
ORf5big-ip_protocol_security_moduleMatch11.2.1
ORf5big-ip_protocol_security_moduleMatch11.3.0
ORf5big-ip_protocol_security_moduleMatch11.4.0
ORf5big-ip_protocol_security_moduleMatch11.4.1
Node
f5big-ip_link_controllerMatch10.0.0
ORf5big-ip_link_controllerMatch10.0.1
ORf5big-ip_link_controllerMatch10.1.0
ORf5big-ip_link_controllerMatch10.2.0
ORf5big-ip_link_controllerMatch10.2.1
ORf5big-ip_link_controllerMatch10.2.2
ORf5big-ip_link_controllerMatch11.0.0
Node
f5big-ip_application_security_managerMatch10.0.0
ORf5big-ip_application_security_managerMatch10.0.1
ORf5big-ip_application_security_managerMatch10.1.0
ORf5big-ip_application_security_managerMatch10.2.0
ORf5big-ip_application_security_managerMatch10.2.1
ORf5big-ip_application_security_managerMatch10.2.2
ORf5big-ip_application_security_managerMatch11.0.0
Node
f5big-ip_global_traffic_managerMatch10.0.0
ORf5big-ip_global_traffic_managerMatch10.0.1
ORf5big-ip_global_traffic_managerMatch10.1.0
ORf5big-ip_global_traffic_managerMatch10.2.0
ORf5big-ip_global_traffic_managerMatch10.2.1
ORf5big-ip_global_traffic_managerMatch10.2.2
ORf5big-ip_global_traffic_managerMatch11.0.0
Node
f5big-ip_wan_optimization_managerMatch10.0.0
ORf5big-ip_wan_optimization_managerMatch10.0.1
ORf5big-ip_wan_optimization_managerMatch10.1.0
ORf5big-ip_wan_optimization_managerMatch10.2.0
ORf5big-ip_wan_optimization_managerMatch10.2.1
ORf5big-ip_wan_optimization_managerMatch10.2.2
ORf5big-ip_wan_optimization_managerMatch11.0.0
Node
f5big-ip_access_policy_managerMatch10.1.0
ORf5big-ip_access_policy_managerMatch10.2.0
ORf5big-ip_access_policy_managerMatch10.2.1
ORf5big-ip_access_policy_managerMatch10.2.2
ORf5big-ip_access_policy_managerMatch11.0.0
Node
f5big-ip_edge_gatewayMatch10.1.0
ORf5big-ip_edge_gatewayMatch10.2.0
ORf5big-ip_edge_gatewayMatch10.2.1
ORf5big-ip_edge_gatewayMatch10.2.2
ORf5big-ip_edge_gatewayMatch11.0.0
Related
f5
f5
K15220 : iControl vulnerability CVE-2014-2928
2015-09-15 00:00:00
SOL15220 - iControl vulnerability CVE-2014-2928
2014-05-07 00:00:00
packetstorm
packetstorm
F5 iControl Remote Command Execution
2014-05-07 00:00:00
F5 iControl Remote Root Command Execution
2014-10-08 00:00:00
openvas
openvas
F5 BIG-IP - iControl vulnerability CVE-2014-2928
2015-03-09 00:00:00
nvd
nvd
CVE-2014-2928
2014-05-12 14:55:06
zdt
zdt
F5 iControl Remote Root Command Execution Exploit
2014-10-09 00:00:00
F5 iControl Remote Command Execution Vulnerability
2014-05-09 00:00:00
checkpoint_advisories
checkpoint_advisories
nessus
nessus
F5 Networks BIG-IP : iControl vulnerability (K15220)
2014-10-10 00:00:00
cvelist
cvelist
CVE-2014-2928
2014-05-12 14:00:00
prion
prion
Cross site request forgery (csrf)
2014-05-12 14:55:00
7.5 High
AI Score
Confidence
Low
7.1 High
CVSS2
Access Vector
Access Complexity
Authentication
SINGLE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:H/Au:S/C:C/I:C/A:C
0.624 Medium
EPSS
Percentile
97.8%
Related for CVE-2014-2928