Vulnerabilidades em F5 Networks, Inc.
140 resultadosAnálise Vexday
Com 140 CVEs catalogadas e nenhuma atualmente listada no CISA KEV, a F5 Networks apresenta taxa de exploração ativa abaixo da média geral do catálogo, o que sugere pressão imediata reduzida em termos de ameaças confirmadas em campo. Não há vulnerabilidades críticas nem registros recentes nos últimos 90 dias, indicando estabilidade no ritmo de descobertas recentes. A CVE mais relevante no momento é CVE-2018-5511, com score EPSS de 0,1476 — valor que, embora moderado, merece monitoramento dado o histórico de produtos F5 como alvos de interesse em ambientes corporativos. A existência de ao menos um PoC público reforça a importância de manter patches aplicados mesmo na ausência de exploração confirmada.
CVE-2017-6166—In BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Link Controller, PEM, and WebSafe software 12.0.0 to 12.1.1, in some cases the Traffic MaEPSS 1.9%CVE-2018-5523—On F5 BIG-IP 13.1.0-13.1.0.3, 13.0.0, 12.1.0-12.1.3.1, 11.6.1-11.6.3.1, 11.5.1-11.5.5, or 11.2.1 and Enterprise Manager 3.1.1, when authentiEPSS 1.9%CVE-2018-5548—On BIG-IP APM 11.6.0-11.6.3, an insecure AES ECB mode is used for orig_uri parameter in an undisclosed /vdesk link of APM virtual server conEPSS 1.9%CVE-2018-15328—On BIG-IP 14.0.x, 13.x, 12.x, and 11.x, Enterprise Manager 3.1.1, BIG-IQ 6.x, 5.x, and 4.x, and iWorkflow 2.x, the passphrases for SNMPv3 usEPSS 1.8%CVE-2018-5545—On F5 WebSafe Alert Server 1.0.0-4.2.6, a malicious, authenticated user can execute code on the alert server by using a maliciously crafted EPSS 1.8%CVE-2018-15314—On F5 BIG-IP AFM 13.0.0-13.1.1.1 and 12.1.0-12.1.3.6, there is a Reflected Cross Site Scripting vulnerability in undisclosed TMUI page.EPSS 1.8%CVE-2018-15313—On F5 BIG-IP AFM 13.0.0-13.1.1.1 and 12.1.0-12.1.3.6, there is a Reflected Cross Site Scripting vulnerability in undisclosed TMUI page.EPSS 1.8%CVE-2018-15319—On BIG-IP 14.0.0-14.0.0.2, 13.0.0-13.1.1.1, or 12.1.0-12.1.3.6, malicious requests made to virtual servers with an HTTP profile can cause thEPSS 1.7%CVE-2018-5541—When F5 BIG-IP ASM 13.0.0-13.1.0.1, 12.1.0-12.1.3.5, 11.6.0-11.6.3.1, or 11.5.1-11.5.6 is processing HTTP requests, an unusually large numbeEPSS 1.7%CVE-2018-5534—Under certain conditions on F5 BIG-IP 13.1.0-13.1.0.5, 13.0.0, 12.1.0-12.1.3.1, 11.6.0-11.6.3.1, or 11.5.0-11.5.6, TMM may core while procesEPSS 1.6%CVE-2018-5549—On BIG-IP APM 11.6.0-11.6.3.1, 12.1.0-12.1.3.3, 13.0.0, and 13.1.0-13.1.0.3, APMD may core when processing SAML Assertion or response contaiEPSS 1.6%CVE-2018-5539—Under certain conditions, on F5 BIG-IP ASM 13.0.0-13.1.0.7, 12.1.0-12.1.3.5, 11.6.0-11.6.3.1, 11.5.1-11.5.6, or 11.2.1, when processing CSRFEPSS 1.6%CVE-2018-5530—F5 BIG-IP 13.0.0-13.1.0.5, 12.1.0-12.1.3.5, or 11.6.0-11.6.3.1 virtual servers with HTTP/2 profiles enabled are vulnerable to "HPACK Bomb".EPSS 1.6%CVE-2018-5533—Under certain conditions on F5 BIG-IP 13.0.0, 12.1.0-12.1.2, 11.6.0-11.6.3.1, or 11.5.0-11.5.6, TMM may core while processing SSL forward prEPSS 1.6%CVE-2017-6153—Features in F5 BIG-IP 13.0.0-13.1.0.3, 12.1.0-12.1.3.1, 11.6.1-11.6.3.1, 11.5.1-11.5.5, or 11.2.1 system that utilizes inflate functionalityEPSS 1.6%CVE-2018-5513—On F5 BIG-IP 13.1.0-13.1.0.3, 13.0.0, 12.1.0-12.1.3.3, 11.6.1-11.6.3.1, 11.5.1-11.5.5, or 11.2.1, a malformed TLS handshake causes TMM to crEPSS 1.6%CVE-2018-5524—Under certain conditions, on F5 BIG-IP 13.0.0-13.1.0.5, 12.1.0-12.1.3.1, or 11.6.1 HF2-11.6.3.1, virtual servers configured with Client SSL EPSS 1.6%CVE-2017-6150—Under certain conditions for F5 BIG-IP systems 13.0.0 or 12.1.0 - 12.1.3.1, using FastL4 profiles, when the Reassemble IP Fragments option iEPSS 1.6%CVE-2018-15311—When F5 BIG-IP 13.0.0-13.1.0.5, 12.1.0-12.1.3.5, 11.6.0-11.6.3.2, or 11.5.1-11.5.6 is processing specially crafted TCP traffic with the LargEPSS 1.6%CVE-2018-5517—On F5 BIG-IP 13.1.0-13.1.0.5, malformed TCP packets sent to a self IP address or a FastL4 virtual server may cause an interruption of servicEPSS 1.6%