Command injection

2017-12-2117:29:00

PRIOn knowledge base

www.prio-n.com

8.1 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

56.4%

JSON

In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, GTM, Link Controller, PEM, WebAccelerator and WebSafe software version 13.0.0, 12.0.0 - 12.1.2, 11.6.0 - 11.6.1 and 11.5.0 - 11.5.4, in some circumstances, Traffic Management Microkernel (TMM) does not properly handle certain malformed TLS1.2 records, which allows remote attackers to cause a denial-of-service (DoS) or possible remote command execution on the BIG-IP system.

CPENameOperatorVersion
big-ip_access_policy_managereq11.5.2
big-ip_access_policy_managereq11.5.0
big-ip_access_policy_managereq11.5.1
big-ip_access_policy_managereq13.0.0
big-ip_access_policy_managereq11.5.3
big-ip_access_policy_managereq11.5.4
big-ip_access_policy_managerge11.6.0
big-ip_access_policy_managerle11.6.1
big-ip_access_policy_managerge12.0.0
big-ip_access_policy_managerle12.1.2

Name	Operator	Version
big-ip_access_policy_manager	eq	11.5.2
big-ip_access_policy_manager	eq	11.5.0
big-ip_access_policy_manager	eq	11.5.1
big-ip_access_policy_manager	eq	13.0.0
big-ip_access_policy_manager	eq	11.5.3
big-ip_access_policy_manager	eq	11.5.4
big-ip_access_policy_manager	ge	11.6.0
big-ip_access_policy_manager	le	11.6.1
big-ip_access_policy_manager	ge	12.0.0
big-ip_access_policy_manager	le	12.1.2