4.3

CVE-2014-8730

EPSS 13.72%
Veröffentlicht 10.12.2014 00:59:01
Zuletzt bearbeitet 06.05.2026 22:30:45
Erkennungen
Login

The SSL profiles component in F5 BIG-IP LTM, APM, and ASM 10.0.0 through 10.2.4 and 11.0.0 through 11.5.1, AAM 11.4.0 through 11.5.1, AFM 11.3.0 through 11.5.1, Analytics 11.0.0 through 11.5.1, Edge Gateway, WebAccelerator, and WOM 10.1.0 through 10.2.4 and 11.0.0 through 11.3.0, PEM 11.3.0 through 11.6.0, and PSM 10.0.0 through 10.2.4 and 11.0.0 through 11.4.1 and BIG-IQ Cloud and Security 4.0.0 through 4.4.0 and Device 4.2.0 through 4.4.0, when using TLS 1.x before TLS 1.2, does not properly check CBC padding bytes when terminating connections, which makes it easier for man-in-the-middle attackers to obtain cleartext data via a padding-oracle attack, a variant of CVE-2014-3566 (aka POODLE).  NOTE: the scope of this identifier is limited to the F5 implementation only. Other vulnerable implementations should receive their own CVE ID, since this is not a vulnerability within the design of TLS 1.x itself.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 17

NVD 136 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

F5 ≫ Big-ip Local Traffic Manager Version 10.0.0

F5 ≫ Big-ip Local Traffic Manager Version 10.0.1

F5 ≫ Big-ip Local Traffic Manager Version 10.1.0

F5 ≫ Big-ip Local Traffic Manager Version 10.2.0

F5 ≫ Big-ip Local Traffic Manager Version 10.2.1

F5 ≫ Big-ip Local Traffic Manager Version 10.2.2

F5 ≫ Big-ip Local Traffic Manager Version 10.2.3

F5 ≫ Big-ip Local Traffic Manager Version 10.2.4

F5 ≫ Big-ip Local Traffic Manager Version 11.0.0

F5 ≫ Big-ip Local Traffic Manager Version 11.1.0

F5 ≫ Big-ip Local Traffic Manager Version 11.2.0

F5 ≫ Big-ip Local Traffic Manager Version 11.2.1

F5 ≫ Big-ip Local Traffic Manager Version 11.3.0

F5 ≫ Big-ip Local Traffic Manager Version 11.4.0

F5 ≫ Big-ip Local Traffic Manager Version 11.4.1

F5 ≫ Big-ip Local Traffic Manager Version 11.5.1

F5 ≫ Big-ip Access Policy Manager Version 10.1.0

F5 ≫ Big-ip Access Policy Manager Version 10.2.0

F5 ≫ Big-ip Access Policy Manager Version 10.2.1

F5 ≫ Big-ip Access Policy Manager Version 10.2.2

F5 ≫ Big-ip Access Policy Manager Version 10.2.3

F5 ≫ Big-ip Access Policy Manager Version 10.2.4

F5 ≫ Big-ip Access Policy Manager Version 11.0.0

F5 ≫ Big-ip Access Policy Manager Version 11.1.0

F5 ≫ Big-ip Access Policy Manager Version 11.2.0

F5 ≫ Big-ip Access Policy Manager Version 11.2.1

F5 ≫ Big-ip Access Policy Manager Version 11.3.0

F5 ≫ Big-ip Access Policy Manager Version 11.4.0

F5 ≫ Big-ip Access Policy Manager Version 11.5.0

F5 ≫ Big-ip Access Policy Manager Version 11.5.1

F5 ≫ Big-ip Policy Enforcement Manager Version 11.3.0

F5 ≫ Big-ip Policy Enforcement Manager Version 11.4.0

F5 ≫ Big-ip Policy Enforcement Manager Version 11.4.1

F5 ≫ Big-ip Policy Enforcement Manager Version 11.5.0

F5 ≫ Big-ip Policy Enforcement Manager Version 11.5.1

F5 ≫ Big-ip Policy Enforcement Manager Version 11.6.0

F5 ≫ Big-ip Protocol Security Module Version 10.0.0

F5 ≫ Big-ip Protocol Security Module Version 10.0.1

F5 ≫ Big-ip Protocol Security Module Version 10.1.0

F5 ≫ Big-ip Protocol Security Module Version 10.2.0

F5 ≫ Big-ip Protocol Security Module Version 10.2.1

F5 ≫ Big-ip Protocol Security Module Version 10.2.2

F5 ≫ Big-ip Protocol Security Module Version 10.2.3

F5 ≫ Big-ip Protocol Security Module Version 10.2.4

F5 ≫ Big-ip Protocol Security Module Version 11.0.0

F5 ≫ Big-ip Protocol Security Module Version 11.1.0

F5 ≫ Big-ip Protocol Security Module Version 11.2.0

F5 ≫ Big-ip Protocol Security Module Version 11.2.1

F5 ≫ Big-ip Protocol Security Module Version 11.3.0

F5 ≫ Big-ip Protocol Security Module Version 11.4.0

F5 ≫ Big-ip Protocol Security Module Version 11.4.1

F5 ≫ Big-ip Application Acceleration Manager Version 11.4.0

F5 ≫ Big-ip Application Acceleration Manager Version 11.4.1

F5 ≫ Big-ip Application Acceleration Manager Version 11.5.0

F5 ≫ Big-ip Application Acceleration Manager Version 11.5.1

F5 ≫ Big-ip Application Acceleration Manager Version 11.6.0

F5 ≫ Big-ip Webaccelerator Version 10.0.0

F5 ≫ Big-ip Webaccelerator Version 10.0.1

F5 ≫ Big-ip Webaccelerator Version 10.1.0

F5 ≫ Big-ip Webaccelerator Version 10.2.0

F5 ≫ Big-ip Webaccelerator Version 10.2.1

F5 ≫ Big-ip Webaccelerator Version 10.2.2

F5 ≫ Big-ip Webaccelerator Version 10.2.3

F5 ≫ Big-ip Webaccelerator Version 10.2.4

F5 ≫ Big-ip Webaccelerator Version 11.0.0

F5 ≫ Big-ip Webaccelerator Version 11.1.0

F5 ≫ Big-ip Webaccelerator Version 11.2.0

F5 ≫ Big-ip Webaccelerator Version 11.2.1

F5 ≫ Big-ip Webaccelerator Version 11.3.0

F5 ≫ Big-iq Security Version 4.0.0

F5 ≫ Big-iq Security Version 4.1.0

F5 ≫ Big-iq Security Version 4.2.0

F5 ≫ Big-iq Security Version 4.3.0

F5 ≫ Big-iq Security Version 4.4.0

F5 ≫ Big-ip Edge Gateway Version 10.1.0

F5 ≫ Big-ip Edge Gateway Version 10.2.0

F5 ≫ Big-ip Edge Gateway Version 10.2.1

F5 ≫ Big-ip Edge Gateway Version 10.2.2

F5 ≫ Big-ip Edge Gateway Version 10.2.3

F5 ≫ Big-ip Edge Gateway Version 10.2.4

F5 ≫ Big-ip Edge Gateway Version 11.0.0

F5 ≫ Big-ip Edge Gateway Version 11.1.0

F5 ≫ Big-ip Edge Gateway Version 11.2.0

F5 ≫ Big-ip Edge Gateway Version 11.2.1

F5 ≫ Big-ip Edge Gateway Version 11.3.0

F5 ≫ Big-iq Device Version 4.2.0

F5 ≫ Big-iq Device Version 4.3.0

F5 ≫ Big-iq Device Version 4.4.0

F5 ≫ Big-ip Application Security Manager Version 10.0.0

F5 ≫ Big-ip Application Security Manager Version 10.0.1

F5 ≫ Big-ip Application Security Manager Version 10.1.0

F5 ≫ Big-ip Application Security Manager Version 10.2.0

F5 ≫ Big-ip Application Security Manager Version 10.2.1

F5 ≫ Big-ip Application Security Manager Version 10.2.2

F5 ≫ Big-ip Application Security Manager Version 10.2.3

F5 ≫ Big-ip Application Security Manager Version 10.2.4

F5 ≫ Big-ip Application Security Manager Version 11.0.0

F5 ≫ Big-ip Application Security Manager Version 11.1.0

F5 ≫ Big-ip Application Security Manager Version 11.2.0

F5 ≫ Big-ip Application Security Manager Version 11.2.1

F5 ≫ Big-ip Application Security Manager Version 11.3.0

F5 ≫ Big-ip Application Security Manager Version 11.4.0

F5 ≫ Big-ip Application Security Manager Version 11.4.1

F5 ≫ Big-ip Application Security Manager Version 11.5.1

F5 ≫ Big-ip Advanced Firewall Manager Version 11.3.0

F5 ≫ Big-ip Advanced Firewall Manager Version 11.4.0

F5 ≫ Big-ip Advanced Firewall Manager Version 11.4.1

F5 ≫ Big-ip Advanced Firewall Manager Version 11.5.0

F5 ≫ Big-ip Advanced Firewall Manager Version 11.5.1

F5 ≫ Big-ip Analytics Version 11.0.0

F5 ≫ Big-ip Analytics Version 11.1.0

F5 ≫ Big-ip Analytics Version 11.2.0

F5 ≫ Big-ip Analytics Version 11.2.1

F5 ≫ Big-ip Analytics Version 11.3.0

F5 ≫ Big-ip Analytics Version 11.4.0

F5 ≫ Big-ip Analytics Version 11.4.1

F5 ≫ Big-ip Analytics Version 11.5.0

F5 ≫ Big-ip Analytics Version 11.5.1

F5 ≫ Big-iq Cloud Version 4.0.0

F5 ≫ Big-iq Cloud Version 4.1.0

F5 ≫ Big-iq Cloud Version 4.2.0

F5 ≫ Big-iq Cloud Version 4.3.0

F5 ≫ Big-iq Cloud Version 4.4.0

F5 ≫ Big-ip Wan Optimization Manager Version 10.0.0

F5 ≫ Big-ip Wan Optimization Manager Version 10.0.1

F5 ≫ Big-ip Wan Optimization Manager Version 10.1.0

F5 ≫ Big-ip Wan Optimization Manager Version 10.2.0

F5 ≫ Big-ip Wan Optimization Manager Version 10.2.1

F5 ≫ Big-ip Wan Optimization Manager Version 10.2.2

F5 ≫ Big-ip Wan Optimization Manager Version 10.2.3

F5 ≫ Big-ip Wan Optimization Manager Version 10.2.4

F5 ≫ Big-ip Wan Optimization Manager Version 11.0.0

F5 ≫ Big-ip Wan Optimization Manager Version 11.1.0

F5 ≫ Big-ip Wan Optimization Manager Version 11.2.0

F5 ≫ Big-ip Wan Optimization Manager Version 11.2.1

F5 ≫ Big-ip Wan Optimization Manager Version 11.3.0

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	13.72%	0.96

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	4.3	8.6	2.9	AV:N/AC:M/Au:N/C:P/I:N/A:N

Es wurden noch keine Informationen zu CWE veröffentlicht.

https://support.lenovo.com/product_security/poodle

https://support.lenovo.com/us/en/product_security/poodle

http://marc.info/?l=bugtraq&m=144372772101168&w=2

http://secunia.com/advisories/62167

http://secunia.com/advisories/62224

http://secunia.com/advisories/62388

http://www-01.ibm.com/support/docview.wss?uid=swg21693271

http://www-01.ibm.com/support/docview.wss?uid=swg21693337

http://www-01.ibm.com/support/docview.wss?uid=swg21693495

http://www.openwall.com/lists/oss-security/2014/12/09/27

https://devcentral.f5.com/articles/cve-2014-8730-padding-issue-8151

Vendor Advisory

https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04819635

https://support.f5.com/kb/en-us/solutions/public/15000/800/sol15882.html

Vendor Advisory

https://www.imperialviolet.org/2014/12/08/poodleagain.html

https://nvd.nist.gov/vuln/detail/CVE-2014-8730

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2014-8730

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2014-8730

EUVD