CVE-2018-5537

🗓️ 25 Jul 2018 14:00:00Reported by f5Type

Remote attacker disruption on F5 BIG-IP due to specially prepared HTML content

Reporter	Title	Published	Views	Family All 8
CNVD	F5 BIG-IP Denial of Service Vulnerability (CNVD-2018-21232)	27 Jul 201800:00	–	cnvd
Cvelist	CVE-2018-5537	25 Jul 201814:00	–	cvelist
EUVD	EUVD-2018-17306	7 Oct 202500:30	–	euvd
F5 Networks	K94105051: TMM vulnerability CVE-2018-5537	21 Feb 202318:34	–	f5
Tenable Nessus	F5 Networks BIG-IP : TMM vulnerability (K94105051)	2 Nov 201800:00	–	nessus
NVD	CVE-2018-5537	25 Jul 201814:29	–	nvd
OSV	CVE-2018-5537	25 Jul 201814:29	–	osv
Prion	Hardcoded credentials	25 Jul 201814:29	–	prion

NVD

Node

f5 big-ip_local_traffic_managerRange11.2.1–11.5.6

f5 big-ip_local_traffic_managerRange11.6.0–11.6.3.1

f5 big-ip_local_traffic_managerRange12.1.0–12.1.3.5

f5 big-ip_local_traffic_managerRange13.0.0–13.1.0.5

Node

f5 big-ip_application_acceleration_managerRange11.2.1–11.5.6

f5 big-ip_application_acceleration_managerRange11.6.0–11.6.3.1

f5 big-ip_application_acceleration_managerRange12.1.0–12.1.3.5

f5 big-ip_application_acceleration_managerRange13.0.0–13.1.0.5

Node

f5 big-ip_advanced_firewall_managerRange11.2.1–11.5.6

f5 big-ip_advanced_firewall_managerRange11.6.0–11.6.3.1

f5 big-ip_advanced_firewall_managerRange12.1.0–12.1.2

f5 big-ip_advanced_firewall_managerRange13.0.0–13.1.0.5

Node

f5 big-ip_access_policy_managerRange11.2.1–11.5.6

f5 big-ip_access_policy_managerRange11.6.0–11.6.3.1

f5 big-ip_access_policy_managerRange12.1.0–12.1.3.5

f5 big-ip_access_policy_managerRange13.0.0–13.1.0.5

Node

f5 big-ip_application_security_managerRange10.1.0–11.5.6

f5 big-ip_application_security_managerRange11.6.0–11.6.3.1

f5 big-ip_application_security_managerRange12.1.0–12.1.3.5

f5 big-ip_application_security_managerRange13.0.0–13.1.0.5

Node

f5 big-ip_edge_gatewayRange11.2.1–11.5.6

f5 big-ip_edge_gatewayRange11.6.0–11.6.3.1

f5 big-ip_edge_gatewayRange12.1.0–12.1.3.5

f5 big-ip_edge_gatewayRange13.0.0–13.1.0.5

Node

f5 big-ip_global_traffic_managerRange11.2.1–11.5.6

f5 big-ip_global_traffic_managerRange11.6.0–11.6.3.1

f5 big-ip_global_traffic_managerRange12.1.0–12.1.3.5

f5 big-ip_global_traffic_managerRange13.0.0–13.1.0.5

Node

f5 big-ip_policy_enforcement_managerRange11.2.1–11.5.6

f5 big-ip_policy_enforcement_managerRange11.6.0–11.6.3.1

f5 big-ip_policy_enforcement_managerRange12.1.0–12.1.3.5

f5 big-ip_policy_enforcement_managerRange13.0.0–13.1.0.5

Node

f5 big-ip_webacceleratorRange11.2.1–11.5.6

f5 big-ip_webacceleratorRange11.6.0–11.6.3.1

f5 big-ip_webacceleratorRange12.1.0–12.1.3.5

f5 big-ip_webacceleratorRange13.0.0–13.1.0.5

Node

f5 big-ip_websafeRange11.2.1–11.5.6

f5 big-ip_websafeRange11.6.1–11.6.3.1

f5 big-ip_websafeRange12.1.0–12.1.3.5

f5 big-ip_websafeRange13.0.0–13.1.0.5

[
  {
    "product": "BIG-IP (LTM, AAM, AFM, APM, ASM, Edge Gateway, GTM, PEM, WebAccelerator, WebSafe)",
    "vendor": "F5 Networks, Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "13.0.0-13.1.0.5"
      },
      {
        "status": "affected",
        "version": "12.1.0-12.1.3.5"
      },
      {
        "status": "affected",
        "version": "11.6.0-11.6.3.1"
      },
      {
        "status": "affected",
        "version": "11.2.1-11.5.6"
      }
    ]
  }
]

Source	Link
support	www.support.f5.com/csp/article/K94105051

21 Nov 2024 04:09Current

5.2Medium risk

Vulners AI Score5.2

CVSS 22.6

CVSS 35.3

EPSS0.0069

CWE-20