Vulnerabilities fixed in F5 BIG-IP

🗓️ 02 Feb 2023 00:00:00Reported by NCSCType

ncsc

ncsc🔗 advisories.ncsc.nl👁 3 Views

F5 BIG-IP vulnerabilities may bypass security, cause DoS, or enable code execution; updates released.

Reporter	Title	Published	Views	Family All 207
BDU FSTEC	The vulnerability of the Edge Client for Windows component (f5fpclientW.exe), a control device for access control and remote authentication of the BIG-IP Access Policy Manager, allows a perpetrator to execute arbitrary commands.	15 Feb 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the HTTP Profile configuration in the BIG-IP application security server virtual machine allows a attacker to cause a service failure.	21 Feb 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the BIG-IP Access Policy Manager’s access control and remote authentication mechanisms, as well as the software products such as BIG-IP Advanced Firewall Manager, BIG-IP Analytics, BIG-IP Application Acceleration Manager, BIG-IP Application Security Manager, BIG-IP Hybrid Defender, BIG-IP Domain Name System, BIG-IP Fraud Protection Service, BIG-IP Link Controller, BIG-IP Local Traffic Manager, BIG-IP Policy Enforcement Manager, BIG-IP Orchestrator, allows a perpetrator to trigger a service failure.	21 Feb 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Network Address Translation (NAT) technology implementation in the FastL4 network interface card of the BIG-IP Advanced Firewall Manager virtual server allows a attacker to cause a service failure.	27 Feb 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the BIG-IP Access Policy Manager’s access control and remote authentication mechanism lies in errors during pointer assignment, allowing attackers to trigger an octath in the service.	7 Mar 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerabilities of the BIG-IP Access Policy Manager, as well as the BIG-IP Advanced Firewall Manager, BIG-IP Analytics, BIG-IP Application Acceleration Manager, BIG-IP Application Security Manager, BIG-IP Hybrid Defender, BIG-IP Domain Name System, BIG-IP Fraud Protection Service, BIG-IP Link Controller, BIG-IP Local Traffic Manager, BIG-IP Policy Enforcement Manager, BIG-IP Orchestrator, allow a perpetrator to access confidential data.	7 Mar 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the iControl SOAP interface for access control and remote authentication in BIG-IP allows a perpetrator to execute arbitrary code.	1 Dec 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the BIG-IP Access Policy Manager’s access control and remote authentication mechanisms, as well as the software products such as BIG-IP Advanced Firewall Manager, BIG-IP Analytics, BIG-IP Application Acceleration Manager, BIG-IP Application Security Manager, BIG-IP Hybrid Defender, BIG-IP Domain Name System, BIG-IP Fraud Protection Service, BIG-IP Link Controller, BIG-IP Local Traffic Manager, BIG-IP Policy Enforcement Manager, BIG-IP Orchestrator, allows a perpetrator to trigger a service failure.	4 Dec 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the BIG-IP DNS server, related to pointer redirection errors, allows attackers to cause service failures.	6 Dec 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the BIG-IP Access Policy Manager’s access control and remote authentication mechanisms, as well as the software products such as BIG-IP Advanced Firewall Manager, BIG-IP Analytics, BIG-IP Application Acceleration Manager, BIG-IP Application Security Manager, BIG-IP Hybrid Defender, BIG-IP Domain Name System, BIG-IP Fraud Protection Service, BIG-IP Link Controller, BIG-IP Local Traffic Manager, BIG-IP Policy Enforcement Manager, BIG-IP Orchestrator, allows a perpetrator to trigger a service failure.	6 Dec 202300:00	–	bdu_fstec

02 Feb 2023 00:00Current

7.5High risk

Vulners AI Score7.5

CVSS 3.18.5

EPSS0.72646

SSVC

F5 BIG-IP vulnerabilities traffic bypass denial of service arbitrary code execution sensitive data access administrator privileges update releases supported versions