Lucene search
K

EUVD-2024-19396

🗓️ 03 Oct 2025 20:07:09Reported by EUVDType 
euvd
 euvd
🔗 euvd.enisa.europa.eu👁 3 Views

Vulnerability allows command execution via secure copy on certain administrators with incomplete CVE fix

Related
Affected
Refs
ReporterTitlePublishedViews
Family
BDU FSTEC
The vulnerability of the SCP utility for access control and remote authentication, as well as software such as BIG-IP Advanced Firewall Manager, BIG-IP Advanced Web Application Firewall, BIG-IP Analytics, BIG-IP Application Acceleration Manager, BIG-IP Application Security Manager, BIG-IP Application Visibility and Reporting (AVR), BIG-IP Camer-Grade NAT (CGNAT), BIG-IP DDos Hybrid Defender, BIG-IP Domain Name System, BIG-IP Edge Gateway, BIG-IP Fraud Protection Service, BIG-IP Global Traffic Manager, BIG-IP Link Controller, BIG-IP Local Traffic Manager, BIG-IP Policy Inforcement Manager, BIG-IP SSL Orchestrator, BIG-IP Webaccelerator, and BIG-IP WebSafe—is related to unlimited resource distribution. This allows attackers to execute arbitrary commands.
4 Mar 202400:00
bdu_fstec
CNNVD
F5 BIG-IP and F5 BIG-IQ Security Vulnerabilities
14 Feb 202400:00
cnnvd
CVE
CVE-2024-21782
14 Feb 202416:30
cve
Cvelist
CVE-2024-21782 BIG-IP and BIG-IQ secure copy vulnerability
14 Feb 202416:30
cvelist
F5 Networks
K000138353: Quarterly Security Notification (February 2024)
14 Feb 202414:04
f5
F5 Networks
K98606833: BIG-IP and BIG-IQ scp vulnerability CVE-2024-21782
14 Feb 202413:42
f5
Tenable Nessus
F5 Networks BIG-IP : BIG-IP and BIG-IQ scp vulnerability (K98606833)
14 Feb 202400:00
nessus
NCSC
Vulnerabilities fixed in F5 BIG-IP and BIG-IQ
16 Feb 202400:00
ncsc
NVD
CVE-2024-21782
14 Feb 202417:15
nvd
OSV
CVE-2024-21782
14 Feb 202417:15
osv
Rows per page
[
  {
    "enisaIdVendor": [
      {
        "id": "03890c09-d952-3d73-8268-9417013c3b0f",
        "vendor": {
          "name": "F5"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "610cf07b-acc7-3755-a553-0c30a97cabee",
        "product": {
          "name": "BIG-IP"
        },
        "product_version": "15.1.0 <15.1.9"
      },
      {
        "id": "9cb849b0-4473-3f7d-95bb-92fdd33e5a0a",
        "product": {
          "name": "BIG-IP"
        },
        "product_version": "17.1.0 <17.1.1"
      },
      {
        "id": "9cd421ac-8196-3acf-8c19-cc1e745b96ed",
        "product": {
          "name": "BIG-IP"
        }
      },
      {
        "id": "ab59a505-09af-333c-854b-450baf12ef46",
        "product": {
          "name": "BIG-IP"
        },
        "product_version": "16.1.0 <16.1.4"
      },
      {
        "id": "c1195abd-f3e6-34e0-8542-f0bdb69168dc",
        "product": {
          "name": "BIG-IQ"
        }
      },
      {
        "id": "cf8db115-369e-3f47-bd64-9c94257dbbb3",
        "product": {
          "name": "BIG-IQ"
        },
        "product_version": "8.0.0 <*"
      }
    ]
  }
]

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

03 Oct 2025 20:07Current
6.7Medium risk
Vulners AI Score6.7
CVSS 3.16.7
EPSS0.00178
SSVC
3