F5

Big-ip Carrier-grade Nat

30 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
4.3

CVE-2023-38419

  • EPSS 0.16%
  • Published 02.08.2023 16:15:10
  • Last modified 21.11.2024 08:13:31

An authenticated attacker with guest privileges or higher can cause the iControl SOAP process to terminate by sending undisclosed requests.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

6.1

CVE-2023-38138

  • EPSS 0.52%
  • Published 02.08.2023 16:15:10
  • Last modified 21.11.2024 08:12:56

A reflected cross-site scripting (XSS) vulnerability exists in an undisclosed page of the BIG-IP Configuration utility which allows an attacker to run JavaScript in the context of the currently logged-in user.  Note: Software versions which have rea...

7.5

CVE-2023-29163

  • EPSS 0.4%
  • Published 03.05.2023 15:15:13
  • Last modified 21.11.2024 07:56:38

When UDP profile with idle timeout set to immediate or the value 0 is configured on a virtual server, undisclosed traffic can cause TMM to terminate.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

4.3

CVE-2023-28406

  • EPSS 0.6%
  • Published 03.05.2023 15:15:12
  • Last modified 21.11.2024 07:55:00

A directory traversal vulnerability exists in an undisclosed page of the BIG-IP Configuration utility which may allow an authenticated attacker to read files with .xml extension. Access to restricted information is limited and the attacker does not c...

6.1

CVE-2023-27378

  • EPSS 0.35%
  • Published 03.05.2023 15:15:12
  • Last modified 21.11.2024 07:52:47

Multiple reflected cross-site scripting (XSS) vulnerabilities exist in undisclosed pages of the BIG-IP Configuration utility which allow an attacker to run JavaScript in the context of the currently logged-in user.  Note: Software versions which hav...

5.3

CVE-2023-24594

  • EPSS 0.14%
  • Published 03.05.2023 15:15:12
  • Last modified 21.11.2024 07:48:12

When an SSL profile is configured on a Virtual Server, undisclosed traffic can cause an increase in CPU or SSL accelerator resource utilization.   Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

3.7

CVE-2022-41983

  • EPSS 0.16%
  • Published 19.10.2022 22:15:13
  • Last modified 21.11.2024 07:24:12

On specific hardware platforms, on BIG-IP versions 16.1.x before 16.1.3.1, 15.1.x before 15.1.7, 14.1.x before 14.1.5.1, and all versions of 13.1.x, while Intel QAT (QuickAssist Technology) and the AES-GCM/CCM cipher is in use, undisclosed conditions...

8.8

CVE-2022-28716

  • EPSS 1.23%
  • Published 05.05.2022 17:15:14
  • Last modified 21.11.2024 06:57:47

On 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13.1.x versions prior to 13.1.5, and all versions of 12.1.x 11.6.x, a DOM-based cross-site scripting (XSS) vulnerability exists in an undisclo...

7.5

CVE-2002-20001

Exploit
  • EPSS 14.68%
  • Published 11.11.2021 19:15:07
  • Last modified 22.08.2025 10:33:16

The Diffie-Hellman Key Agreement Protocol allows remote attackers (from the client side) to send arbitrary numbers that are actually not public keys, and trigger expensive server-side DHE modular-exponentiation calculations, aka a D(HE)at or D(HE)ate...

7.5

CVE-2020-27720

  • EPSS 0.9%
  • Published 24.12.2020 16:15:15
  • Last modified 21.11.2024 05:21:41

On BIG-IP LTM/CGNAT version 16.0.0-16.0.0.1, 15.1.0-15.1.0.5, 14.1.0-14.1.3, and 13.1.0-13.1.3.5, when processing NAT66 traffic with Port Block Allocation (PBA) mode and SP-DAG enabled, and dag-ipv6-prefix-len configured with a value less than the de...