K75532331: iRulesLX debug NodeJS vulnerability CVE-2019-6644

🗓️ 21 Feb 2023 20:02:45Reported by f5Type

f5🔗 my.f5.com👁 40 Views

iRulesLX debug NodeJS vulnerability CVE-2019-6644. Debug nodejs process may be exposed to remote attackers allowing evaluation of arbitrary JavaScript

Reporter	Title	Published	Views	Family All 7
CVE	CVE-2019-6644	4 Sep 201916:58	–	cve
Cvelist	CVE-2019-6644	4 Sep 201916:58	–	cvelist
EUVD	EUVD-2019-16203	7 Oct 202500:30	–	euvd
Tenable Nessus	F5 Networks BIG-IP : iRulesLX debug NodeJS vulnerability (K75532331)	12 Aug 201900:00	–	nessus
NVD	CVE-2019-6644	4 Sep 201917:15	–	nvd
Prion	Code injection	4 Sep 201917:15	–	prion
RedhatCVE	CVE-2019-6644	22 May 202505:18	–	redhatcve

Vulners

Node

f5 big-ip_ltmRange14.1.0–14.1.0.6

OR

f5 big-ip_aamRange14.1.0–14.1.0.6

OR

f5 big-ip_afmRange14.1.0–14.1.0.6

OR

f5 big-ip_analyticsRange14.1.0–14.1.0.6

OR

f5 big-ip_apmRange14.1.0–14.1.0.6

OR

f5 big-ip_asmRange14.1.0–14.1.0.6

OR

f5 big-ip_dnsRange14.1.0–14.1.0.6

OR

f5 big-ip_edge_gatewayRange14.1.0–14.1.0.6

OR

f5 big-ip_fpsRange14.1.0–14.1.0.6

OR

f5 big-ip_gtmRange14.1.0–14.1.0.6

OR

f5 big-ip_link_controllerRange14.1.0–14.1.0.6

OR

f5 big-ip_pemRange14.1.0–14.1.0.6

OR

f5 big-ip_webacceleratorRange14.1.0–14.1.0.6

OR

f5 big-ip_ltmRange14.0.0–14.1.0.6

OR

f5 big-ip_aamRange14.0.0–14.1.0.6

OR

f5 big-ip_afmRange14.0.0–14.1.0.6

OR

f5 big-ip_analyticsRange14.0.0–14.1.0.6

OR

f5 big-ip_apmRange14.0.0–14.1.0.6

OR

f5 big-ip_asmRange14.0.0–14.1.0.6

OR

f5 big-ip_dnsRange14.0.0–14.1.0.6

OR

f5 big-ip_edge_gatewayRange14.0.0–14.1.0.6

OR

f5 big-ip_fpsRange14.0.0–14.1.0.6

OR

f5 big-ip_gtmRange14.0.0–14.1.0.6

OR

f5 big-ip_link_controllerRange14.0.0–14.1.0.6

OR

f5 big-ip_pemRange14.0.0–14.1.0.6

OR

f5 big-ip_webacceleratorRange14.0.0–14.1.0.6

OR

f5 big-ip_ltmRange13.0.0–13.1.2

OR

f5 big-ip_aamRange13.0.0–13.1.2

OR

f5 big-ip_afmRange13.0.0–13.1.2

OR

f5 big-ip_analyticsRange13.0.0–13.1.2

OR

f5 big-ip_apmRange13.0.0–13.1.2

OR

f5 big-ip_asmRange13.0.0–13.1.2

OR

f5 big-ip_dnsRange13.0.0–13.1.2

OR

f5 big-ip_edge_gatewayRange13.0.0–13.1.2

OR

f5 big-ip_fpsRange13.0.0–13.1.2

OR

f5 big-ip_gtmRange13.0.0–13.1.2

OR

f5 big-ip_link_controllerRange13.0.0–13.1.2

OR

f5 big-ip_pemRange13.0.0–13.1.2

OR

f5 big-ip_webacceleratorRange13.0.0–13.1.2

OR

f5 big-ip_ltmRange12.1.3–12.1.4

OR

f5 big-ip_aamRange12.1.3–12.1.4

OR

f5 big-ip_afmRange12.1.3–12.1.4

OR

f5 big-ip_analyticsRange12.1.3–12.1.4

OR

f5 big-ip_apmRange12.1.3–12.1.4

OR

f5 big-ip_asmRange12.1.3–12.1.4

OR

f5 big-ip_dnsRange12.1.3–12.1.4

OR

f5 big-ip_edge_gatewayRange12.1.3–12.1.4

OR

f5 big-ip_fpsRange12.1.3–12.1.4

OR

f5 big-ip_gtmRange12.1.3–12.1.4

OR

f5 big-ip_link_controllerRange12.1.3–12.1.4

OR

f5 big-ip_pemRange12.1.3–12.1.4

OR

f5 big-ip_webacceleratorRange12.1.3–12.1.4

21 Feb 2023 20:02Current

8.1High risk

Vulners AI Score8.1

CVSS 26.8

CVSS 3.19.4

EPSS0.00789

iruleslx nodejs vulnerability cve-2019-6644 remote attacker arbitrary javascript big-ip debug mode extension configuration workspace