CVE-2019-6654
En bref Sévérité Non disponible EPSS EPSS 0.48 % · centile 41 (2026-10-27) État PUBLISHED Publiée 2019-09-25 Mise à jour 2024-08-04 Attribuée par f5 Statut NVD Modified Description On versions 14.0.0-14.1.2, 13.0.0-13.1.3, 12.1.0-12.1.5, and 11.5.1-11.6.5, the BIG-IP system fails to perform Martian Address Filtering (As defined in RFC 1812 section 5.3.7) on the control plane (management interface). This may allow attackers on an adjacent system to force BIG-IP into processing packets with spoofed source addresses.
Scores Version Score Vecteur Évalué par CVSS 3.1 MEDIUM 4.3 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N NVD · nvd@nist.gov (Primary) CVSS 2.0 LOW 3.3 AV:A/AC:L/Au:N/C:N/I:P/A:N NVD · nvd@nist.gov (Primary)
Faiblesses (CWE)
Références européennes
Configurations affectées (CPE NVD) cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:* ≥ 11.5.1 ≤ 11.6.5cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:* ≥ 12.1.0 ≤ 12.1.5cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:* ≥ 13.0.0 ≤ 13.1.3cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:* ≥ 14.0.0 ≤ 14.1.2cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:* ≥ 11.5.1 ≤ 11.6.5cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:* ≥ 12.1.0 ≤ 12.1.5cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:* ≥ 13.0.0 ≤ 13.1.3cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:* ≥ 14.0.0 ≤ 14.1.2cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:* ≥ 11.5.1 ≤ 11.6.5cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:* ≥ 12.1.0 ≤ 12.1.5cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:* ≥ 13.0.0 ≤ 13.1.3cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:* ≥ 14.0.0 ≤ 14.1.2cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:* ≥ 11.5.1 ≤ 11.6.5cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:* ≥ 12.1.0 ≤ 12.1.5cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:* ≥ 13.0.0 ≤ 13.1.3cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:* ≥ 14.0.0 ≤ 14.1.2cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:* ≥ 11.5.1 ≤ 11.6.5cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:* ≥ 12.1.0 ≤ 12.1.5cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:* ≥ 13.0.0 ≤ 13.1.3cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:* ≥ 14.0.0 ≤ 14.1.2cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:* ≥ 11.5.1 ≤ 11.6.5cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:* ≥ 12.1.0 ≤ 12.1.5cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:* ≥ 13.0.0 ≤ 13.1.3cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:* ≥ 14.0.0 ≤ 14.1.2cpe:2.3:a:f5:big-ip_edge_gateway:*:*:*:*:*:*:*:* ≥ 11.5.1 ≤ 11.6.5cpe:2.3:a:f5:big-ip_edge_gateway:*:*:*:*:*:*:*:* ≥ 12.1.0 ≤ 12.1.5cpe:2.3:a:f5:big-ip_edge_gateway:*:*:*:*:*:*:*:* ≥ 13.0.0 ≤ 13.1.3cpe:2.3:a:f5:big-ip_edge_gateway:*:*:*:*:*:*:*:* ≥ 14.0.0 ≤ 14.1.2cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:* ≥ 11.5.1 ≤ 11.6.5cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:* ≥ 12.1.0 ≤ 12.1.5cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:* ≥ 13.0.0 ≤ 13.1.3cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:* ≥ 14.0.0 ≤ 14.1.2cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:* ≥ 11.5.1 ≤ 11.6.5cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:* ≥ 12.1.0 ≤ 12.1.5cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:* ≥ 13.0.0 ≤ 13.1.3cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:* ≥ 14.0.0 ≤ 14.1.2cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:* ≥ 11.5.1 ≤ 11.6.5cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:* ≥ 12.1.0 ≤ 12.1.5cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:* ≥ 13.0.0 ≤ 13.1.3cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:* ≥ 14.0.0 ≤ 14.1.2+12 autres Produits affectés Produit Versions BIG-IP affected 14.0.0-14.1.2, 13.0.0-13.1.3, 12.1.0-12.1.5, 11.5.1-11.6.5
Références
Sources
