9.8

CVE-2016-5700

Virtual servers in F5 BIG-IP systems 11.5.0, 11.5.1 before HF11, 11.5.2, 11.5.3, 11.5.4 before HF2, 11.6.0 before HF8, 11.6.1 before HF1, 12.0.0 before HF4, and 12.1.0 before HF2, when configured with the HTTP Explicit Proxy functionality or SOCKS profile, allow remote attackers to modify the system configuration, read system files, and possibly execute arbitrary code via unspecified vectors.

Data is provided by the National Vulnerability Database (NVD)
F5 ≫ Big-ip Local Traffic Manager Version11.5.0
F5 ≫ Big-ip Local Traffic Manager Version11.5.1
F5 ≫ Big-ip Local Traffic Manager Version11.5.2
F5 ≫ Big-ip Local Traffic Manager Version11.5.3
F5 ≫ Big-ip Local Traffic Manager Version11.5.4
F5 ≫ Big-ip Local Traffic Manager Version11.6.0
F5 ≫ Big-ip Local Traffic Manager Version11.6.1
F5 ≫ Big-ip Local Traffic Manager Version12.0.0
F5 ≫ Big-ip Local Traffic Manager Version12.1.0
F5 ≫ Big-ip Websafe Version11.6.0
F5 ≫ Big-ip Websafe Version11.6.1
F5 ≫ Big-ip Websafe Version12.0.0
F5 ≫ Big-ip Websafe Version12.1.0
F5 ≫ Big-ip Link Controller Version11.5.0
F5 ≫ Big-ip Link Controller Version11.5.1
F5 ≫ Big-ip Link Controller Version11.5.2
F5 ≫ Big-ip Link Controller Version11.5.3
F5 ≫ Big-ip Link Controller Version11.5.4
F5 ≫ Big-ip Link Controller Version11.6.0
F5 ≫ Big-ip Link Controller Version11.6.1
F5 ≫ Big-ip Link Controller Version12.0.0
F5 ≫ Big-ip Link Controller Version12.1.0
F5 ≫ Big-ip Access Policy Manager Version11.5.0
F5 ≫ Big-ip Access Policy Manager Version11.5.1
F5 ≫ Big-ip Access Policy Manager Version11.5.2
F5 ≫ Big-ip Access Policy Manager Version11.5.3
F5 ≫ Big-ip Access Policy Manager Version11.5.4
F5 ≫ Big-ip Access Policy Manager Version11.6.0
F5 ≫ Big-ip Access Policy Manager Version11.6.1
F5 ≫ Big-ip Access Policy Manager Version12.0.0
F5 ≫ Big-ip Access Policy Manager Version12.1.0
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 5.61% 0.9
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 9.8 3.9 5.9
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
nvd@nist.gov 9.3 8.6 10
AV:N/AC:M/Au:N/C:C/I:C/A:C
CWE-284 Improper Access Control

The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

http://www.securitytracker.com/id/1036928
Third Party Advisory
VDB Entry