Lucene search

PRIOn knowledge basePRION:CVE-2021-23044

HistorySep 14, 2021 - 4:15 p.m.

Design/Logic Flaw

2021-09-1416:15:00

PRIOn knowledge base

www.prio-n.com

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

0.001 Low

EPSS

Percentile

36.9%

JSON

On BIG-IP version 16.x before 16.1.0, 15.1.x before 15.1.3.1, 14.1.x before 14.1.4.2, 13.1.x before 13.1.4.1, and all versions of 12.1.x and 11.6.x, when the Intel QuickAssist Technology (QAT) compression driver is used on affected BIG-IP hardware and BIG-IP Virtual Edition (VE) platforms, undisclosed traffic can cause the Traffic Management Microkernel (TMM) to terminate. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

CPENameOperatorVersion
big-ip_access_policy_managerge11.6.0
big-ip_access_policy_managerle11.6.5
big-ip_access_policy_managerge12.1.0
big-ip_access_policy_managerle12.1.6
big-ip_access_policy_managerge14.1.0
big-ip_access_policy_managerlt14.1.4.2
big-ip_access_policy_managerge15.1.0
big-ip_access_policy_managerlt15.1.3.1
big-ip_access_policy_managerge16.0.0
big-ip_access_policy_managerlt16.1.0

Name	Operator	Version
big-ip_access_policy_manager	ge	11.6.0
big-ip_access_policy_manager	le	11.6.5
big-ip_access_policy_manager	ge	12.1.0
big-ip_access_policy_manager	le	12.1.6
big-ip_access_policy_manager	ge	14.1.0
big-ip_access_policy_manager	lt	14.1.4.2
big-ip_access_policy_manager	ge	15.1.0
big-ip_access_policy_manager	lt	15.1.3.1
big-ip_access_policy_manager	ge	16.0.0
big-ip_access_policy_manager	lt	16.1.0

Rows per page:

1-10 of 1321

References

support.f5.com/csp/article/K35408374

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

0.001 Low

EPSS

Percentile

36.9%

JSON

Related for PRION:CVE-2021-23044