9.8

CVE-2017-6131

In some circumstances, an F5 BIG-IP version 12.0.0 to 12.1.2 and 13.0.0 Azure cloud instance may contain a default administrative password which could be used to remotely log into the BIG-IP system. The impacted administrative account is the Azure instance administrative user that was created at deployment. The root and admin accounts are not vulnerable. An attacker may be able to remotely access the BIG-IP host via SSH.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
F5 ≫ Big-ip Local Traffic Manager Version 12.0.0
F5 ≫ Big-ip Local Traffic Manager Version 12.1.0
F5 ≫ Big-ip Local Traffic Manager Version 12.1.1
F5 ≫ Big-ip Local Traffic Manager Version 12.1.2
F5 ≫ Big-ip Local Traffic Manager Version 13.0.0
F5 ≫ Big-ip Access Policy Manager Version 12.0.0
F5 ≫ Big-ip Access Policy Manager Version 12.1.0
F5 ≫ Big-ip Access Policy Manager Version 12.1.1
F5 ≫ Big-ip Access Policy Manager Version 12.1.2
F5 ≫ Big-ip Access Policy Manager Version 13.0.0
F5 ≫ Big-ip Domain Name System Version 12.0.0
F5 ≫ Big-ip Domain Name System Version 12.1.0
F5 ≫ Big-ip Domain Name System Version 12.1.1
F5 ≫ Big-ip Domain Name System Version 12.1.2
F5 ≫ Big-ip Domain Name System Version 13.0.0
F5 ≫ Big-ip Link Controller Version 12.0.0
F5 ≫ Big-ip Link Controller Version 12.1.0
F5 ≫ Big-ip Link Controller Version 12.1.1
F5 ≫ Big-ip Link Controller Version 12.1.2
F5 ≫ Big-ip Link Controller Version 13.0.0
F5 ≫ Big-ip Websafe Version 12.0.0
F5 ≫ Big-ip Websafe Version 12.1.0
F5 ≫ Big-ip Websafe Version 12.1.1
F5 ≫ Big-ip Websafe Version 12.1.2
F5 ≫ Big-ip Websafe Version 13.0.0
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.14% 0.625
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 9.8 3.9 5.9
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NIST 7.5 10 6.4
AV:N/AC:L/Au:N/C:P/I:P/A:P
CWE-798 Use of Hard-coded Credentials

The product contains hard-coded credentials, such as a password or cryptographic key.

http://www.securitytracker.com/id/1038569
https://support.f5.com/csp/article/K61757346
Vendor Advisory
Permissions Required