7.8

CVE-2012-1493

Exploit
F5 BIG-IP appliances 9.x before 9.4.8-HF5, 10.x before 10.2.4, 11.0.x before 11.0.0-HF2, and 11.1.x before 11.1.0-HF3, and Enterprise Manager before 2.1.0-HF2, 2.2.x before 2.2.0-HF1, and 2.3.x before 2.3.0-HF3, use a single SSH private key across different customers' installations and do not properly restrict access to this key, which makes it easier for remote attackers to perform SSH logins via the PubkeyAuthentication option.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
F5 ≫ Big-ip Application Security Manager Version 9.2.0 Update hf4
F5 ≫ Big-ip Application Security Manager Version 10.2.3 Update hf1
F5 ≫ Big-ip Application Security Manager Version 11.0.0 Update hf1
F5 ≫ Big-ip Application Security Manager Version 11.1.0 Update hf2
F5 ≫ Big-ip Global Traffic Manager Version 9.2.2
F5 ≫ Big-ip Global Traffic Manager Version 9.4.8 Update hf4
F5 ≫ Big-ip Global Traffic Manager Version 10.0.0
F5 ≫ Big-ip Global Traffic Manager Version 10.2.3 Update hf1
F5 ≫ Big-ip Global Traffic Manager Version 11.0.0
F5 ≫ Big-ip Global Traffic Manager Version 11.0.0 Update hf1
F5 ≫ Big-ip Global Traffic Manager Version 11.1.0
F5 ≫ Big-ip Global Traffic Manager Version 11.1.0 Update hf2
F5 ≫ Big-ip Local Traffic Manager Version 9.0.0
F5 ≫ Big-ip Local Traffic Manager Version 9.4.8 Update hf4
F5 ≫ Big-ip Local Traffic Manager Version 10.0.0
F5 ≫ Big-ip Local Traffic Manager Version 10.2.3 Update hf1
F5 ≫ Big-ip Local Traffic Manager Version 11.0.0
F5 ≫ Big-ip Local Traffic Manager Version 11.0.0 Update hf1
F5 ≫ Big-ip Local Traffic Manager Version 11.1.0
F5 ≫ Big-ip Local Traffic Manager Version 11.1.0 Update hf2
F5 ≫ Tmos
F5 ≫ Tmos Version 2.0
F5 ≫ Tmos Version 4.0
F5 ≫ Tmos Version 4.2
F5 ≫ Tmos Version 4.3
F5 ≫ Tmos Version 4.4
F5 ≫ Tmos Version 4.5
F5 ≫ Tmos Version 4.5.6
F5 ≫ Tmos Version 4.5.9
F5 ≫ Tmos Version 4.5.10
F5 ≫ Tmos Version 4.5.11
F5 ≫ Tmos Version 4.5.12
F5 ≫ Tmos Version 4.6
F5 ≫ Tmos Version 4.6.2
F5 ≫ Tmos Version 9.0
F5 ≫ Tmos Version 9.0.1
F5 ≫ Tmos Version 9.0.2
F5 ≫ Tmos Version 9.0.3
F5 ≫ Tmos Version 9.0.4
F5 ≫ Tmos Version 9.0.5
F5 ≫ Tmos Version 9.1
F5 ≫ Tmos Version 9.1.1
F5 ≫ Tmos Version 9.1.2
F5 ≫ Tmos Version 9.1.3
F5 ≫ Tmos Version 9.2
F5 ≫ Tmos Version 9.2.2
F5 ≫ Tmos Version 9.2.3
F5 ≫ Tmos Version 9.2.4
F5 ≫ Tmos Version 9.2.5
F5 ≫ Tmos Version 9.3
F5 ≫ Tmos Version 9.3.1
F5 ≫ Tmos Version 9.4
F5 ≫ Tmos Version 9.4.1
F5 ≫ Tmos Version 9.4.2
F5 ≫ Tmos Version 9.4.3
F5 ≫ Tmos Version 9.4.4
F5 ≫ Tmos Version 9.4.5
F5 ≫ Tmos Version 9.4.6
F5 ≫ Tmos Version 9.4.7
F5 ≫ Tmos Version 9.4.8
F5 ≫ Tmos Version 9.6.0
F5 ≫ Tmos Version 9.6.1
F5 ≫ Tmos Version 10.0.0
F5 ≫ Tmos Version 10.0.1
F5 ≫ Tmos Version 10.1.0
F5 ≫ Tmos Version 10.2.0
F5 ≫ Enterprise Manager Edition virtual
F5 ≫ Enterprise Manager Version 1.0 Edition virtual
F5 ≫ Enterprise Manager Version 2.0 Edition virtual
F5 ≫ Enterprise Manager Version 2.1.0 Edition virtual
F5 ≫ Enterprise Manager Version 2.1.0 Update hf1 Edition virtual
F5 ≫ Enterprise Manager Version 2.2.0 Edition virtual
F5 ≫ Enterprise Manager Version 2.3.0 Edition virtual
F5 ≫ Enterprise Manager Version 2.3.0 Update hf2 Edition virtual
F5 ≫ Enterprise Manager Version 1.0
F5 ≫ Enterprise Manager Version 2.0
F5 ≫ Enterprise Manager Version 2.1.0
F5 ≫ Enterprise Manager Version 2.1.0 Update hf1
F5 ≫ Enterprise Manager Version 2.2.0
F5 ≫ Enterprise Manager Version 2.3.0
F5 ≫ Enterprise Manager Version 2.3.0 Update hf2
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 63.08% 0.991
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.8 10 6.9
AV:N/AC:L/Au:N/C:C/I:N/A:N
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://support.f5.com/kb/en-us/solutions/public/13000/600/sol13600.html
Vendor Advisory
http://www.theregister.co.uk/2012/06/13/f5_kit_metasploit_exploit/
https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/ssh/f5_bigip_known_privkey.rb
Patch
Exploit
https://www.trustmatta.com/advisories/MATTA-2012-002.txt