7.4

CVE-2018-5531

Through undisclosed methods, on F5 BIG-IP 13.0.0-13.1.0.7, 12.1.0-12.1.3.5, 11.6.0-11.6.3.1, or 11.2.1-11.5.6, adjacent network attackers can cause a denial of service for VCMP guest and host systems. Attack must be sourced from adjacent network (layer 2).

Data is provided by the National Vulnerability Database (NVD)
F5 ≫ Big-ip Local Traffic Manager Version >= 11.2.1 <= 11.5.6
F5 ≫ Big-ip Local Traffic Manager Version >= 11.6.0 <= 11.6.3.1
F5 ≫ Big-ip Local Traffic Manager Version >= 12.1.0 <= 12.1.3.5
F5 ≫ Big-ip Local Traffic Manager Version >= 13.0.0 <= 13.1.0.7
F5 ≫ Big-ip Application Acceleration Manager Version >= 11.2.1 <= 11.5.6
F5 ≫ Big-ip Application Acceleration Manager Version >= 11.6.0 <= 11.6.3.1
F5 ≫ Big-ip Application Acceleration Manager Version >= 12.1.0 <= 12.1.3.5
F5 ≫ Big-ip Application Acceleration Manager Version >= 13.0.0 <= 13.1.0.7
F5 ≫ Big-ip Advanced Firewall Manager Version >= 11.2.1 <= 11.5.6
F5 ≫ Big-ip Advanced Firewall Manager Version >= 11.6.0 <= 11.6.3.1
F5 ≫ Big-ip Advanced Firewall Manager Version >= 12.1.0 <= 12.1.3.5
F5 ≫ Big-ip Advanced Firewall Manager Version >= 13.0.0 <= 13.1.0.7
F5 ≫ Big-ip Analytics Version >= 11.2.1 <= 11.5.6
F5 ≫ Big-ip Analytics Version >= 11.6.0 <= 11.6.3.1
F5 ≫ Big-ip Analytics Version >= 12.1.0 <= 12.1.3.5
F5 ≫ Big-ip Analytics Version >= 13.0.0 <= 13.1.0.7
F5 ≫ Big-ip Access Policy Manager Version >= 11.2.1 <= 11.5.6
F5 ≫ Big-ip Access Policy Manager Version >= 11.6.0 <= 11.6.3.1
F5 ≫ Big-ip Access Policy Manager Version >= 12.1.0 <= 12.1.3.5
F5 ≫ Big-ip Access Policy Manager Version >= 13.0.0 <= 13.1.0.7
F5 ≫ Big-ip Application Security Manager Version >= 10.1.0 <= 11.5.6
F5 ≫ Big-ip Application Security Manager Version >= 11.6.0 <= 11.6.3.1
F5 ≫ Big-ip Application Security Manager Version >= 12.1.0 <= 12.1.3.5
F5 ≫ Big-ip Application Security Manager Version >= 13.0.0 <= 13.1.0.7
F5 ≫ Big-ip Domain Name System Version >= 11.2.1 <= 11.5.6
F5 ≫ Big-ip Domain Name System Version >= 11.6.0 <= 11.6.3.1
F5 ≫ Big-ip Domain Name System Version >= 12.1.0 <= 12.1.3.5
F5 ≫ Big-ip Domain Name System Version >= 13.0.0 <= 13.1.0.7
F5 ≫ Big-ip Edge Gateway Version >= 11.2.1 <= 11.5.6
F5 ≫ Big-ip Edge Gateway Version >= 11.6.0 <= 11.6.3.1
F5 ≫ Big-ip Edge Gateway Version >= 12.1.0 <= 12.1.3.5
F5 ≫ Big-ip Edge Gateway Version >= 13.0.0 <= 13.1.0.7
F5 ≫ Big-ip Fraud Protection Service Version >= 11.2.1 <= 11.5.6
F5 ≫ Big-ip Fraud Protection Service Version >= 11.6.0 <= 11.6.3.1
F5 ≫ Big-ip Fraud Protection Service Version >= 12.1.0 <= 12.1.3.5
F5 ≫ Big-ip Fraud Protection Service Version >= 13.0.0 <= 13.1.0.7
F5 ≫ Big-ip Global Traffic Manager Version >= 11.2.1 <= 11.5.6
F5 ≫ Big-ip Global Traffic Manager Version >= 11.6.0 <= 11.6.3.1
F5 ≫ Big-ip Global Traffic Manager Version >= 12.1.0 <= 12.1.3.5
F5 ≫ Big-ip Global Traffic Manager Version >= 13.0.0 <= 13.1.0.7
F5 ≫ Big-ip Link Controller Version >= 11.2.1 <= 11.5.6
F5 ≫ Big-ip Link Controller Version >= 11.6.0 <= 11.6.3.1
F5 ≫ Big-ip Link Controller Version >= 12.1.0 <= 12.1.3.5
F5 ≫ Big-ip Link Controller Version >= 13.0.0 <= 13.1.0.7
F5 ≫ Big-ip Policy Enforcement Manager Version >= 11.2.1 <= 11.5.6
F5 ≫ Big-ip Policy Enforcement Manager Version >= 11.6.0 <= 11.6.3.1
F5 ≫ Big-ip Policy Enforcement Manager Version >= 12.1.0 <= 12.1.3.5
F5 ≫ Big-ip Policy Enforcement Manager Version >= 13.0.0 <= 13.1.0.7
F5 ≫ Big-ip Webaccelerator Version >= 11.2.1 <= 11.5.6
F5 ≫ Big-ip Webaccelerator Version >= 11.6.0 <= 11.6.3.1
F5 ≫ Big-ip Webaccelerator Version >= 12.1.0 <= 12.1.3.5
F5 ≫ Big-ip Webaccelerator Version >= 13.0.0 <= 13.1.0.7
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.18% 0.36
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 7.4 2.8 4
CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
nvd@nist.gov 6.1 6.5 6.9
AV:A/AC:L/Au:N/C:N/I:N/A:C
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.