9.8

CVE-2016-5700

Virtual servers in F5 BIG-IP systems 11.5.0, 11.5.1 before HF11, 11.5.2, 11.5.3, 11.5.4 before HF2, 11.6.0 before HF8, 11.6.1 before HF1, 12.0.0 before HF4, and 12.1.0 before HF2, when configured with the HTTP Explicit Proxy functionality or SOCKS profile, allow remote attackers to modify the system configuration, read system files, and possibly execute arbitrary code via unspecified vectors.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
F5 ≫ Big-ip Local Traffic Manager Version 11.5.0
F5 ≫ Big-ip Local Traffic Manager Version 11.5.1
F5 ≫ Big-ip Local Traffic Manager Version 11.5.2
F5 ≫ Big-ip Local Traffic Manager Version 11.5.3
F5 ≫ Big-ip Local Traffic Manager Version 11.5.4
F5 ≫ Big-ip Local Traffic Manager Version 11.6.0
F5 ≫ Big-ip Local Traffic Manager Version 11.6.1
F5 ≫ Big-ip Local Traffic Manager Version 12.0.0
F5 ≫ Big-ip Local Traffic Manager Version 12.1.0
F5 ≫ Big-ip Websafe Version 11.6.0
F5 ≫ Big-ip Websafe Version 11.6.1
F5 ≫ Big-ip Websafe Version 12.0.0
F5 ≫ Big-ip Websafe Version 12.1.0
F5 ≫ Big-ip Link Controller Version 11.5.0
F5 ≫ Big-ip Link Controller Version 11.5.1
F5 ≫ Big-ip Link Controller Version 11.5.2
F5 ≫ Big-ip Link Controller Version 11.5.3
F5 ≫ Big-ip Link Controller Version 11.5.4
F5 ≫ Big-ip Link Controller Version 11.6.0
F5 ≫ Big-ip Link Controller Version 11.6.1
F5 ≫ Big-ip Link Controller Version 12.0.0
F5 ≫ Big-ip Link Controller Version 12.1.0
F5 ≫ Big-ip Access Policy Manager Version 11.5.0
F5 ≫ Big-ip Access Policy Manager Version 11.5.1
F5 ≫ Big-ip Access Policy Manager Version 11.5.2
F5 ≫ Big-ip Access Policy Manager Version 11.5.3
F5 ≫ Big-ip Access Policy Manager Version 11.5.4
F5 ≫ Big-ip Access Policy Manager Version 11.6.0
F5 ≫ Big-ip Access Policy Manager Version 11.6.1
F5 ≫ Big-ip Access Policy Manager Version 12.0.0
F5 ≫ Big-ip Access Policy Manager Version 12.1.0
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 6.42% 0.928
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 9.8 3.9 5.9
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NIST 9.3 8.6 10
AV:N/AC:M/Au:N/C:C/I:C/A:C
CWE-284 Improper Access Control

The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

http://www.securityfocus.com/bid/93325
http://www.securitytracker.com/id/1036928
Third Party Advisory
VDB Entry
https://support.f5.com/kb/en-us/solutions/public/k/35/sol35520031.html
Vendor Advisory