CVE-2016-5736

CVE-2016-5736 concerns the default configuration of the IPsec IKE peer listener in multiple F5 BIG-IP products, where the anonymous IKE peer object is present and enabled. This allows a remote attacker to initiate IKE Phase 1 negotiations and potentially brute-force Phase 2 negotiations via unspe...

CVE-2016-5736: Improper Access Control

The default configuration of the IPsec IKE peer listener in F5 BIG-IP LTM, Analytics, APM, ASM, and Link Controller 11.2.1 before HF16, 11.4.x, 11.5.x before 11.5.4 HF2, 11.6.x before 11.6.1, and 12.x before 12.0.0 HF2; BIG-IP AAM, AFM, and PEM 11.4.x, 11.5.x before 11.5.4 HF2, 11.6.x before...

PT-2016-6665

Name of the Vulnerable Software and Affected Versions F5 BIG-IP LTM, Analytics, APM, ASM, and Link Controller versions 11.2.1 through 11.2.1 before HF16, 11.4.x, 11.5.x through 11.5.3, 11.6.x through 11.6.0, and 12.x through 12.0.0 before HF2 F5 BIG-IP AAM, AFM, and PEM versions 11.4.x, 11.5.x...

F5 Networks BIG-IP : BIG-IP IPsec IKE peer listener vulnerability (K10133477)

The anonymous IPsec IKE peer configuration object is present and enabled in the default configuration. The settings of the anonymous IPsec IKE peer object allow an arbitrary peer to establish IKE phase 1 without certificate validation or a pre-shared key which may expose phase 2 negotiations to a...

CVE-2011-0935: Undefined Security Weakness

The PKI functionality in Cisco IOS 15.0 and 15.1 does not prevent permanent caching of certain public keys, which allows remote attackers to bypass authentication and have unspecified other impact by leveraging an IKE peer relationship in which a key was previously valid but later revoked, aka Bu...

PT-2011-2770

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 15.0 through 15.1 Description The issue concerns the PKI functionality, which fails to prevent permanent caching of certain public keys. This allows remote attackers to bypass authentication and potentially have other impact...