9.3

CVE-2014-2927

Exploit

EPSS 7.43%
Published 15.10.2014 14:55:06
Last modified 12.04.2025 10:46:40
Source cret@cert.org
Teams watchlist Login
Open Login

The rsync daemon in F5 BIG-IP 11.6 before 11.6.0, 11.5.1 before HF3, 11.5.0 before HF4, 11.4.1 before HF4, 11.4.0 before HF7, 11.3.0 before HF9, and 11.2.1 before HF11 and Enterprise Manager 3.x before 3.1.1 HF2, when configured in failover mode, does not require authentication, which allows remote attackers to read or write to arbitrary files via a cmi request to the ConfigSync IP address.

Affected products Warnungen 0 Metrics 2 CWE 1 References 6

Data is provided by the National Vulnerability Database (NVD)

F5 ≫ Arx Version6.0.0

F5 ≫ Arx Version6.1.0

F5 ≫ Arx Version6.1.1

F5 ≫ Arx Version6.2.0

F5 ≫ Arx Version6.3.0

F5 ≫ Arx Version6.4.0

F5 ≫ Big-ip Access Policy Manager Version10.1.0

F5 ≫ Big-ip Access Policy Manager Version10.2.0

F5 ≫ Big-ip Access Policy Manager Version10.2.1

F5 ≫ Big-ip Access Policy Manager Version10.2.2

F5 ≫ Big-ip Access Policy Manager Version10.2.3

F5 ≫ Big-ip Access Policy Manager Version10.2.4

F5 ≫ Big-ip Access Policy Manager Version11.0.0

F5 ≫ Big-ip Access Policy Manager Version11.1.0

F5 ≫ Big-ip Access Policy Manager Version11.2.0

F5 ≫ Big-ip Access Policy Manager Version11.2.1

F5 ≫ Big-ip Access Policy Manager Version11.3.0

F5 ≫ Big-ip Access Policy Manager Version11.4.0

F5 ≫ Big-ip Access Policy Manager Version11.4.1

F5 ≫ Big-ip Access Policy Manager Version11.5.0

F5 ≫ Big-ip Access Policy Manager Version11.5.1

F5 ≫ Big-ip Access Policy Manager Version11.6.0

F5 ≫ Big-ip Advanced Firewall Manager Version11.3.0

F5 ≫ Big-ip Advanced Firewall Manager Version11.4.0

F5 ≫ Big-ip Advanced Firewall Manager Version11.4.1

F5 ≫ Big-ip Advanced Firewall Manager Version11.5.0

F5 ≫ Big-ip Advanced Firewall Manager Version11.5.1

F5 ≫ Big-ip Advanced Firewall Manager Version11.6.0

F5 ≫ Big-ip Analytics Version11.0.0

F5 ≫ Big-ip Analytics Version11.1.0

F5 ≫ Big-ip Analytics Version11.2.0

F5 ≫ Big-ip Analytics Version11.2.1

F5 ≫ Big-ip Analytics Version11.3.0

F5 ≫ Big-ip Analytics Version11.4.0

F5 ≫ Big-ip Analytics Version11.4.1

F5 ≫ Big-ip Analytics Version11.5.0

F5 ≫ Big-ip Analytics Version11.5.1

F5 ≫ Big-ip Analytics Version11.6.0

F5 ≫ Big-ip Application Acceleration Manager Version11.4.0

F5 ≫ Big-ip Application Acceleration Manager Version11.4.1

F5 ≫ Big-ip Application Acceleration Manager Version11.5.0

F5 ≫ Big-ip Application Acceleration Manager Version11.5.1

F5 ≫ Big-ip Application Acceleration Manager Version11.6.0

F5 ≫ Big-ip Application Security Manager Version10.0.0

F5 ≫ Big-ip Application Security Manager Version10.0.1

F5 ≫ Big-ip Application Security Manager Version10.1.0

F5 ≫ Big-ip Application Security Manager Version10.2.0

F5 ≫ Big-ip Application Security Manager Version10.2.1

F5 ≫ Big-ip Application Security Manager Version10.2.2

F5 ≫ Big-ip Application Security Manager Version10.2.3

F5 ≫ Big-ip Application Security Manager Version10.2.4

F5 ≫ Big-ip Application Security Manager Version11.0.0

F5 ≫ Big-ip Application Security Manager Version11.1.0

F5 ≫ Big-ip Application Security Manager Version11.2.0

F5 ≫ Big-ip Application Security Manager Version11.2.1

F5 ≫ Big-ip Application Security Manager Version11.3.0

F5 ≫ Big-ip Application Security Manager Version11.4.0

F5 ≫ Big-ip Application Security Manager Version11.4.1

F5 ≫ Big-ip Application Security Manager Version11.5.0

F5 ≫ Big-ip Application Security Manager Version11.5.1

F5 ≫ Big-ip Application Security Manager Version11.6.0

F5 ≫ Big-ip Edge Gateway Version10.1.0

F5 ≫ Big-ip Edge Gateway Version10.2.0

F5 ≫ Big-ip Edge Gateway Version10.2.1

F5 ≫ Big-ip Edge Gateway Version10.2.2

F5 ≫ Big-ip Edge Gateway Version10.2.3

F5 ≫ Big-ip Edge Gateway Version10.2.4

F5 ≫ Big-ip Edge Gateway Version11.0.0

F5 ≫ Big-ip Edge Gateway Version11.1.0

F5 ≫ Big-ip Edge Gateway Version11.2.0

F5 ≫ Big-ip Edge Gateway Version11.2.1

F5 ≫ Big-ip Edge Gateway Version11.3.0

F5 ≫ Big-ip Global Traffic Manager Version10.0.0

F5 ≫ Big-ip Global Traffic Manager Version10.0.1

F5 ≫ Big-ip Global Traffic Manager Version10.1.0

F5 ≫ Big-ip Global Traffic Manager Version10.2.0

F5 ≫ Big-ip Global Traffic Manager Version10.2.1

F5 ≫ Big-ip Global Traffic Manager Version10.2.2

F5 ≫ Big-ip Global Traffic Manager Version10.2.3

F5 ≫ Big-ip Global Traffic Manager Version10.2.4

F5 ≫ Big-ip Global Traffic Manager Version11.0.0

F5 ≫ Big-ip Global Traffic Manager Version11.1.0

F5 ≫ Big-ip Global Traffic Manager Version11.2.0

F5 ≫ Big-ip Global Traffic Manager Version11.2.1

F5 ≫ Big-ip Global Traffic Manager Version11.3.0

F5 ≫ Big-ip Global Traffic Manager Version11.4.0

F5 ≫ Big-ip Global Traffic Manager Version11.4.1

F5 ≫ Big-ip Global Traffic Manager Version11.5.0

F5 ≫ Big-ip Global Traffic Manager Version11.5.1

F5 ≫ Big-ip Global Traffic Manager Version11.6.0

F5 ≫ Big-ip Link Controller Version10.0.0

F5 ≫ Big-ip Link Controller Version10.0.1

F5 ≫ Big-ip Link Controller Version10.1.0

F5 ≫ Big-ip Link Controller Version10.2.0

F5 ≫ Big-ip Link Controller Version10.2.1

F5 ≫ Big-ip Link Controller Version10.2.2

F5 ≫ Big-ip Link Controller Version10.2.3

F5 ≫ Big-ip Link Controller Version10.2.4

F5 ≫ Big-ip Link Controller Version11.0.0

F5 ≫ Big-ip Link Controller Version11.1.0

F5 ≫ Big-ip Link Controller Version11.2.0

F5 ≫ Big-ip Link Controller Version11.2.1

F5 ≫ Big-ip Link Controller Version11.3.0

F5 ≫ Big-ip Link Controller Version11.4.0

F5 ≫ Big-ip Link Controller Version11.4.1

F5 ≫ Big-ip Link Controller Version11.5.0

F5 ≫ Big-ip Link Controller Version11.5.1

F5 ≫ Big-ip Link Controller Version11.6.0

F5 ≫ Big-ip Local Traffic Manager Version10.0.0

F5 ≫ Big-ip Local Traffic Manager Version10.0.1

F5 ≫ Big-ip Local Traffic Manager Version10.1.0

F5 ≫ Big-ip Local Traffic Manager Version10.2.0

F5 ≫ Big-ip Local Traffic Manager Version10.2.1

F5 ≫ Big-ip Local Traffic Manager Version10.2.2

F5 ≫ Big-ip Local Traffic Manager Version10.2.3

F5 ≫ Big-ip Local Traffic Manager Version10.2.4

F5 ≫ Big-ip Local Traffic Manager Version11.0.0

F5 ≫ Big-ip Local Traffic Manager Version11.1.0

F5 ≫ Big-ip Local Traffic Manager Version11.2.0

F5 ≫ Big-ip Local Traffic Manager Version11.2.1

F5 ≫ Big-ip Local Traffic Manager Version11.3.0

F5 ≫ Big-ip Local Traffic Manager Version11.4.0

F5 ≫ Big-ip Local Traffic Manager Version11.4.1

F5 ≫ Big-ip Local Traffic Manager Version11.5.0

F5 ≫ Big-ip Local Traffic Manager Version11.5.1

F5 ≫ Big-ip Local Traffic Manager Version11.6.0

F5 ≫ Big-ip Policy Enforcement Manager Version11.3.0

F5 ≫ Big-ip Policy Enforcement Manager Version11.4.0

F5 ≫ Big-ip Policy Enforcement Manager Version11.4.1

F5 ≫ Big-ip Policy Enforcement Manager Version11.5.0

F5 ≫ Big-ip Policy Enforcement Manager Version11.5.1

F5 ≫ Big-ip Policy Enforcement Manager Version11.6.0

F5 ≫ Big-ip Protocol Security Module Version10.0.0

F5 ≫ Big-ip Protocol Security Module Version10.0.1

F5 ≫ Big-ip Protocol Security Module Version10.1.0

F5 ≫ Big-ip Protocol Security Module Version10.2.0

F5 ≫ Big-ip Protocol Security Module Version10.2.1

F5 ≫ Big-ip Protocol Security Module Version10.2.2

F5 ≫ Big-ip Protocol Security Module Version10.2.3

F5 ≫ Big-ip Protocol Security Module Version10.2.4

F5 ≫ Big-ip Protocol Security Module Version11.0.0

F5 ≫ Big-ip Protocol Security Module Version11.1.0

F5 ≫ Big-ip Protocol Security Module Version11.2.0

F5 ≫ Big-ip Protocol Security Module Version11.2.1

F5 ≫ Big-ip Protocol Security Module Version11.3.0

F5 ≫ Big-ip Protocol Security Module Version11.4.0

F5 ≫ Big-ip Protocol Security Module Version11.4.1

F5 ≫ Big-ip Wan Optimization Manager Version10.0.0

F5 ≫ Big-ip Wan Optimization Manager Version10.0.1

F5 ≫ Big-ip Wan Optimization Manager Version10.1.0

F5 ≫ Big-ip Wan Optimization Manager Version10.2.0

F5 ≫ Big-ip Wan Optimization Manager Version10.2.1

F5 ≫ Big-ip Wan Optimization Manager Version10.2.2

F5 ≫ Big-ip Wan Optimization Manager Version10.2.3

F5 ≫ Big-ip Wan Optimization Manager Version10.2.4

F5 ≫ Big-ip Wan Optimization Manager Version11.0.0

F5 ≫ Big-ip Wan Optimization Manager Version11.1.0

F5 ≫ Big-ip Wan Optimization Manager Version11.2.0

F5 ≫ Big-ip Wan Optimization Manager Version11.2.1

F5 ≫ Big-ip Wan Optimization Manager Version11.3.0

F5 ≫ Big-ip Webaccelerator Version10.0.0

F5 ≫ Big-ip Webaccelerator Version10.0.1

F5 ≫ Big-ip Webaccelerator Version10.1.0

F5 ≫ Big-ip Webaccelerator Version10.2.0

F5 ≫ Big-ip Webaccelerator Version10.2.1

F5 ≫ Big-ip Webaccelerator Version10.2.2

F5 ≫ Big-ip Webaccelerator Version10.2.3

F5 ≫ Big-ip Webaccelerator Version10.2.4

F5 ≫ Big-ip Webaccelerator Version11.0.0

F5 ≫ Big-ip Webaccelerator Version11.1.0

F5 ≫ Big-ip Webaccelerator Version11.2.0

F5 ≫ Big-ip Webaccelerator Version11.2.1

F5 ≫ Big-ip Webaccelerator Version11.3.0

F5 ≫ Big-iq Cloud Version4.0.0

F5 ≫ Big-iq Cloud Version4.1.0

F5 ≫ Big-iq Cloud Version4.2.0

F5 ≫ Big-iq Cloud Version4.3.0

F5 ≫ Big-iq Device Version4.2.0

F5 ≫ Big-iq Device Version4.3.0

F5 ≫ Big-iq Security Version4.0.0

F5 ≫ Big-iq Security Version4.1.0

F5 ≫ Big-iq Security Version4.2.0

F5 ≫ Big-iq Security Version4.3.0

F5 ≫ Enterprise Manager Version2.1.0

F5 ≫ Enterprise Manager Version2.2.0

F5 ≫ Enterprise Manager Version2.3.0

F5 ≫ Enterprise Manager Version3.0.0

F5 ≫ Enterprise Manager Version3.1.0

F5 ≫ Enterprise Manager Version3.1.1

F5 ≫ Firepass Version6.0.0

F5 ≫ Firepass Version6.0.1

F5 ≫ Firepass Version6.0.2

F5 ≫ Firepass Version6.0.3

F5 ≫ Firepass Version6.1.0

F5 ≫ Firepass Version7.0.0

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	7.43%	0.909

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	9.3	8.6	10	AV:N/AC:M/Au:N/C:C/I:C/A:C

CWE-287 Improper Authentication

When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

http://www.exploit-db.com/exploits/34465

Exploit

http://www.security-assessment.com/files/documents/advisory/F5_Unauthenticated_rsync_access_to_Remote_Root_Code_Execution.pdf

Exploit

https://support.f5.com/kb/en-us/solutions/public/15000/200/sol15236.html

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2014-2927

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2014-2927

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2014-2927

EUVD