4.3

CVE-2018-5538

On F5 BIG-IP DNS 13.1.0-13.1.0.7, 12.1.3-12.1.3.5, DNS Express / DNS Zones accept NOTIFY messages on the management interface from source IP addresses not listed in the 'Allow NOTIFY From' configuration parameter when the db variable "dnsexpress.notifyport" is set to any value other than the default of "0".

Data is provided by the National Vulnerability Database (NVD)
F5 ≫ Big-ip Domain Name System Version >= 12.1.3 <= 12.1.3.5
F5 ≫ Big-ip Domain Name System Version > 13.1.0 <= 13.1.0.7
F5 ≫ Big-ip Global Traffic Manager Version >= 12.1.3 <= 12.1.3.5
F5 ≫ Big-ip Global Traffic Manager Version >= 13.1.0 <= 13.1.0.7
F5 ≫ Big-ip Local Traffic Manager Version >= 12.1.3 <= 12.1.3.5
F5 ≫ Big-ip Local Traffic Manager Version >= 13.1.0 <= 13.1.0.7
F5 ≫ Big-ip Link Controller Version >= 12.1.3 <= 12.1.3.5
F5 ≫ Big-ip Link Controller Version >= 13.1.0 <= 13.1.0.7
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.38% 0.563
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 3.7 2.2 1.4
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N
nvd@nist.gov 4.3 8.6 2.9
AV:N/AC:M/Au:N/C:N/I:P/A:N