F5 BIG-IP Edge Client Windows Component Installer < 7.2.4.1 MITM (K000132522)

The version of the Big-IP Edge Client Windows Component Installer installed on the remote Windows host is before 7.2.4.1. In the pre connection stage, an improper enforcement of message integrity vulnerability exists in BIG-IP Edge Client for Windows. An unauthenticated attacker with a...

CVE-2023-24461

An improper certificate validation vulnerability exists in the BIG-IP Edge Client for Windows and macOS and may allow an attacker to impersonate a BIG-IP APM system. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

CVE-2023-24461

An improper certificate validation vulnerability exists in the BIG-IP Edge Client for Windows and macOS and may allow an attacker to impersonate a BIG-IP APM system. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

CVE-2023-22372

In the pre connection stage, an improper enforcement of message integrity vulnerability exists in BIG-IP Edge Client for Windows and Mac OS. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

CVE-2023-22372

In the pre connection stage, an improper enforcement of message integrity vulnerability exists in BIG-IP Edge Client for Windows and Mac OS. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

Code injection

In the pre connection stage, an improper enforcement of message integrity vulnerability exists in BIG-IP Edge Client for Windows and Mac OS. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

Input validation

An improper certificate validation vulnerability exists in the BIG-IP Edge Client for Windows and macOS and may allow an attacker to impersonate a BIG-IP APM system. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

CVE-2023-24461

CVE-2023-24461 describes an improper certificate validation vulnerability in the BIG-IP Edge Client for Windows and macOS that may allow an attacker to impersonate a BIG-IP APM system. Connected advisories specify affected product families and fixed versions: BIG-IP Edge Client on 17.x is vulnera...

CVE-2023-24461 BIG-IP Edge Client for Windows and macOS vulnerability

An improper certificate validation vulnerability exists in the BIG-IP Edge Client for Windows and macOS and may allow an attacker to impersonate a BIG-IP APM system. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

CVE-2023-22372

CVE-2023-22372 affects BIG-IP Edge Client for Windows and macOS in the pre-connection stage, where improper enforcement of message integrity can allow an MITM attacker to modify requests/responses. The baseline CVSSv3.1 score is 5.9 (Medium) with network attack vector, high integrity impact, no c...

CVE-2023-22372 BIG-IP Edge Client for Windows and Mac OS vulnerability

In the pre connection stage, an improper enforcement of message integrity vulnerability exists in BIG-IP Edge Client for Windows and Mac OS. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

CVE-2023-22372 BIG-IP Edge Client for Windows and Mac OS vulnerability

In the pre connection stage, an improper enforcement of message integrity vulnerability exists in BIG-IP Edge Client for Windows and Mac OS. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

K000132539: BIG-IP Edge Client for Windows and macOS vulnerability CVE-2023-24461

Security Advisory Description An improper certificate validation vulnerability exists in BIG-IP Edge Client for Windows and macOS and may allow an attacker to impersonate a BIG-IP APM system. CVE-2023-24461 Impact An unauthenticated attacker with a man-in-the-middle MITM position may exploit this...

F5 BIG-IP Edge Gateway Trust Management Vulnerability

F5 BIG-IP is an application delivery platform from F5 USA that integrates network traffic management, application security management, load balancing and other functions. A security bypass vulnerability exists in F5 BIG-IP Edge Client for Windows and macOS, which stems from incorrect certificate...

CVE-2023-24461: Improper Certificate Validation

An improper certificate validation vulnerability exists in the BIG-IP Edge Client for Windows and macOS and may allow an attacker to impersonate a BIG-IP APM system. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

CVE-2023-22372: Improper Enforcement of Message Integrity During Transmission in a Communication Channel

In the pre connection stage, an improper enforcement of message integrity vulnerability exists in BIG-IP Edge Client for Windows and Mac OS. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

PT-2023-19621 · F5 · Big-Ip Edge Client

Name of the Vulnerable Software and Affected Versions: BIG-IP Edge Client for Windows and macOS affected versions not specified Description: An improper certificate validation issue exists and may allow an attacker to impersonate a BIG-IP APM system. Recommendations: At the moment, there is no...

F5 BIG-IP Edge Gateway security vulnerabilities

F5 BIG-IP is an application delivery platform from F5 USA that integrates network traffic management, application security management, load balancing and other functions. A security bypass vulnerability exists in the F5 BIG-IP Edge Client for Windows and macOS, which can be exploited by an attack...

PT-2023-18466

Name of the Vulnerable Software and Affected Versions BIG-IP Edge Client affected versions not specified Description An improper enforcement of message integrity issue exists in the pre-connection stage. This affects BIG-IP Edge Client for Windows and Mac OS. Note that software versions which hav...

F5 Networks BIG-IP : BIG-IP Edge Client for Windows vulnerability (K76964818)

The version of F5 Networks BIG-IP installed on the remote host is prior to 15.1.8.2 / 16.1.3.4 / 17.0.0.2 / 17.1.0. It is, therefore, affected by a vulnerability as referenced in the K76964818 advisory. A DLL hijacking vulnerability exists in the BIG-IP Edge Client Windows Installer.CVE-2023-2235...