K45644893: Martian address filtering vulnerability CVE-2019-6654

🗓️ 21 Feb 2023 19:55:43Reported by f5Type

f5🔗 my.f5.com👁 31 Views

BIG-IP system fails to perform martian address filtering for control plane tasks on management interface, allowing adjacent attackers to force processing of spoofed packets. Remote unauthorized modification or disruption of service possible

Reporter	Title	Published	Views	Family All 9
CNVD	F5 BIG-IP Input Validation Error Vulnerability (CNVD-2019-34369)	25 Sep 201900:00	–	cnvd
CVE	CVE-2019-6654	25 Sep 201918:57	–	cve
Cvelist	CVE-2019-6654	25 Sep 201918:57	–	cvelist
EUVD	EUVD-2019-16213	7 Oct 202500:30	–	euvd
Tenable Nessus	F5 Networks BIG-IP : Martian address filtering vulnerability (K45644893)	25 Sep 201900:00	–	nessus
NVD	CVE-2019-6654	25 Sep 201919:15	–	nvd
OSV	CVE-2019-6654	25 Sep 201919:15	–	osv
Prion	Design/Logic Flaw	25 Sep 201919:15	–	prion
RedhatCVE	CVE-2019-6654	22 May 202508:46	–	redhatcve

Vulners

Node

f5 big-ip_ltmRange14.0.0–14.1.2

OR

f5 big-ip_aamRange14.0.0–14.1.2

OR

f5 big-ip_afmRange14.0.0–14.1.2

OR

f5 big-ip_analyticsRange14.0.0–14.1.2

OR

f5 big-ip_apmRange14.0.0–14.1.2

OR

f5 big-ip_asmRange14.0.0–14.1.2

OR

f5 big-ip_dnsRange14.0.0–14.1.2

OR

f5 big-ip_edge_gatewayRange14.0.0–14.1.2

OR

f5 big-ip_fpsRange14.0.0–14.1.2

OR

f5 big-ip_gtmRange14.0.0–14.1.2

OR

f5 big-ip_link_controllerRange14.0.0–14.1.2

OR

f5 big-ip_pemRange14.0.0–14.1.2

OR

f5 big-ip_webacceleratorRange14.0.0–14.1.2

OR

f5 big-ip_ltmRange13.0.0–13.1.3

OR

f5 big-ip_aamRange13.0.0–13.1.3

OR

f5 big-ip_afmRange13.0.0–13.1.3

OR

f5 big-ip_analyticsRange13.0.0–13.1.3

OR

f5 big-ip_apmRange13.0.0–13.1.3

OR

f5 big-ip_asmRange13.0.0–13.1.3

OR

f5 big-ip_dnsRange13.0.0–13.1.3

OR

f5 big-ip_edge_gatewayRange13.0.0–13.1.3

OR

f5 big-ip_fpsRange13.0.0–13.1.3

OR

f5 big-ip_gtmRange13.0.0–13.1.3

OR

f5 big-ip_link_controllerRange13.0.0–13.1.3

OR

f5 big-ip_pemRange13.0.0–13.1.3

OR

f5 big-ip_webacceleratorRange13.0.0–13.1.3

OR

f5 big-ip_ltmRange12.1.0–12.1.5

OR

f5 big-ip_aamRange12.1.0–12.1.5

OR

f5 big-ip_afmRange12.1.0–12.1.5

OR

f5 big-ip_analyticsRange12.1.0–12.1.5

OR

f5 big-ip_apmRange12.1.0–12.1.5

OR

f5 big-ip_asmRange12.1.0–12.1.5

OR

f5 big-ip_dnsRange12.1.0–12.1.5

OR

f5 big-ip_edge_gatewayRange12.1.0–12.1.5

OR

f5 big-ip_fpsRange12.1.0–12.1.5

OR

f5 big-ip_gtmRange12.1.0–12.1.5

OR

f5 big-ip_link_controllerRange12.1.0–12.1.5

OR

f5 big-ip_pemRange12.1.0–12.1.5

OR

f5 big-ip_webacceleratorRange12.1.0–12.1.5

OR

f5 big-ip_ltmRange11.5.1–11.6.5

OR

f5 big-ip_aamRange11.5.1–11.6.5

OR

f5 big-ip_afmRange11.5.1–11.6.5

OR

f5 big-ip_analyticsRange11.5.1–11.6.5

OR

f5 big-ip_apmRange11.5.1–11.6.5

OR

f5 big-ip_asmRange11.5.1–11.6.5

OR

f5 big-ip_dnsRange11.5.1–11.6.5

OR

f5 big-ip_edge_gatewayRange11.5.1–11.6.5

OR

f5 big-ip_fpsRange11.5.1–11.6.5

OR

f5 big-ip_gtmRange11.5.1–11.6.5

OR

f5 big-ip_link_controllerRange11.5.1–11.6.5

OR

f5 big-ip_pemRange11.5.1–11.6.5

OR

f5 big-ip_webacceleratorRange11.5.1–11.6.5

08 Jan 2024 02:30Current

4.9Medium risk

Vulners AI Score4.9

CVSS 23.3

CVSS 3.14.3

EPSS0.00127

big-ip martian address filtering rfc 1812 cve-2019-6654 internet assigned numbers authority adjacent systems remote unauthorized modification.