4.3

CVE-2014-9326

EPSS 0.82%
Veröffentlicht 12.05.2015 19:59:03
Zuletzt bearbeitet 06.05.2026 22:30:45
Erkennungen
Login

The automatic signature update functionality in the (1) Phone Home feature in F5 BIG-IP LTM, AAM, AFM, Analytics, APM, GTM, and Link Controller 11.5.0 through 11.6.0, ASM 10.0.0 through 11.6.0, and PEM 11.3.0 through 11.6.0 and the (2) Call Home feature in ASM 10.0.0 through 11.6.0 and PEM 11.3.0 through 11.6.0 does not properly validate server SSL certificates, which allows remote attackers to conduct man-in-the-middle attacks via a crafted certificate.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 5

NVD 43 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

F5 ≫ Big-ip Application Acceleration Manager Version 11.5.0

F5 ≫ Big-ip Application Acceleration Manager Version 11.5.1

F5 ≫ Big-ip Application Acceleration Manager Version 11.5.2

F5 ≫ Big-ip Application Acceleration Manager Version 11.6.0

F5 ≫ Big-ip Policy Enforcement Manager Version 11.3.0

F5 ≫ Big-ip Policy Enforcement Manager Version 11.4.0

F5 ≫ Big-ip Policy Enforcement Manager Version 11.4.1

F5 ≫ Big-ip Policy Enforcement Manager Version 11.5.0

F5 ≫ Big-ip Policy Enforcement Manager Version 11.5.2

F5 ≫ Big-ip Policy Enforcement Manager Version 11.6.0

F5 ≫ Big-ip Policy Enforcement Manager11.5.1

F5 ≫ Big-ip Global Traffic Manager Version 11.5.0

F5 ≫ Big-ip Global Traffic Manager Version 11.5.1

F5 ≫ Big-ip Global Traffic Manager Version 11.5.2

F5 ≫ Big-ip Global Traffic Manager Version 11.6.0

F5 ≫ Big-ip Advanced Firewall Manager Version 11.5.0

F5 ≫ Big-ip Advanced Firewall Manager Version 11.5.1

F5 ≫ Big-ip Advanced Firewall Manager Version 11.5.2

F5 ≫ Big-ip Advanced Firewall Manager Version 11.6.0

F5 ≫ Big-ip Local Traffic Manager Version 11.5.0

F5 ≫ Big-ip Local Traffic Manager Version 11.5.1

F5 ≫ Big-ip Local Traffic Manager Version 11.5.2

F5 ≫ Big-ip Local Traffic Manager Version 11.6.0

F5 ≫ Big-ip Application Security Manager Version 11.5.0

F5 ≫ Big-ip Application Security Manager Version 11.5.1

F5 ≫ Big-ip Application Security Manager Version 11.5.2

F5 ≫ Big-ip Application Security Manager Version 11.6.0

F5 ≫ Big-ip Link Controller Version 11.5.0

F5 ≫ Big-ip Link Controller Version 11.5.1

F5 ≫ Big-ip Link Controller Version 11.5.2

F5 ≫ Big-ip Link Controller Version 11.6.0

F5 ≫ Big-ip Access Policy Manager Version 11.5.0

F5 ≫ Big-ip Access Policy Manager Version 11.5.1

F5 ≫ Big-ip Access Policy Manager Version 11.5.2

F5 ≫ Big-ip Access Policy Manager Version 11.6.0

F5 ≫ Big-ip Analytics Version 11.5.0

F5 ≫ Big-ip Analytics Version 11.5.1

F5 ≫ Big-ip Analytics Version 11.5.2

F5 ≫ Big-ip Analytics Version 11.6.0

F5 ≫ Big-ip Access Policy Manager Version 11.5.0

F5 ≫ Big-ip Access Policy Manager Version 11.5.1

F5 ≫ Big-ip Access Policy Manager Version 11.5.2

F5 ≫ Big-ip Access Policy Manager Version 11.6.0

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.82%	0.525

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	4.3	8.6	2.9	AV:N/AC:M/Au:N/C:N/I:P/A:N

Es wurden noch keine Informationen zu CWE veröffentlicht.

http://www.securitytracker.com/id/1032305

https://support.f5.com/kb/en-us/solutions/public/16000/000/sol16090.html

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2014-9326

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2014-9326

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2014-9326

EUVD