Lucene search

[email protected]CVE-2017-6140

HistoryDec 21, 2017 - 5:29 p.m.

CVE-2017-6140

2017-12-2117:29:00

CWE-20

[email protected]

web.nvd.nist.gov

cve-2017-6140

big-ip

2000s

2200s

4000s

4200v

i5600

i5800

i7600

i7800

i10600

i10800

viprion 4450

data plane services

ssl

security advisory

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

7.5 High

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.001 Low

EPSS

Percentile

33.6%

JSON

On the BIG-IP 2000s, 2200s, 4000s, 4200v, i5600, i5800, i7600, i7800, i10600,i10800, and VIPRION 4450 blades, running version 11.5.0, 11.5.1, 11.5.2, 11.5.3, 11.5.4, 11.6.0, 11.6.1, 12.0.0, 12.1.0, 12.1.1 or 12.1.2 of BIG-IP LTM, AAM, AFM, Analytics, ASM, DNS, GTM or PEM, an undisclosed sequence of packets sent to Virtual Servers with client or server SSL profiles may cause disruption of data plane services.

CPENameOperatorVersion
f5:big-ip_local_traffic_managerf5 big-ip local traffic managereq11.5.0
f5:big-ip_local_traffic_managerf5 big-ip local traffic managereq11.5.1
f5:big-ip_local_traffic_managerf5 big-ip local traffic managereq11.5.2
f5:big-ip_local_traffic_managerf5 big-ip local traffic managereq11.5.3
f5:big-ip_local_traffic_managerf5 big-ip local traffic managereq11.5.4
f5:big-ip_local_traffic_managerf5 big-ip local traffic managereq11.6.0
f5:big-ip_local_traffic_managerf5 big-ip local traffic managereq11.6.1
f5:big-ip_local_traffic_managerf5 big-ip local traffic managereq12.0.0
f5:big-ip_local_traffic_managerf5 big-ip local traffic managereq12.1.0
f5:big-ip_local_traffic_managerf5 big-ip local traffic managereq12.1.1

CPE	Name	Operator	Version
f5:big-ip_local_traffic_manager	f5 big-ip local traffic manager	eq	11.5.0
f5:big-ip_local_traffic_manager	f5 big-ip local traffic manager	eq	11.5.1
f5:big-ip_local_traffic_manager	f5 big-ip local traffic manager	eq	11.5.2
f5:big-ip_local_traffic_manager	f5 big-ip local traffic manager	eq	11.5.3
f5:big-ip_local_traffic_manager	f5 big-ip local traffic manager	eq	11.5.4
f5:big-ip_local_traffic_manager	f5 big-ip local traffic manager	eq	11.6.0
f5:big-ip_local_traffic_manager	f5 big-ip local traffic manager	eq	11.6.1
f5:big-ip_local_traffic_manager	f5 big-ip local traffic manager	eq	12.0.0
f5:big-ip_local_traffic_manager	f5 big-ip local traffic manager	eq	12.1.0
f5:big-ip_local_traffic_manager	f5 big-ip local traffic manager	eq	12.1.1

Rows per page:

1-10 of 881

References

www.securitytracker.com/id/1040042

support.f5.com/csp/article/K55102452

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

7.5 High

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.001 Low

EPSS

Percentile

33.6%

JSON

Related for CVE-2017-6140

prion1 f51 nessus1