Skip to main content

F5 Products Multiple Vulnerabilities

Release Date: 11 Oct 2023 4888 Views

RISK: Medium Risk

TYPE: Operating Systems - Networks OS

TYPE: Networks OS

Multiple vulnerabilities were identified in F5 Products. A remote attacker could exploit some of these vulnerabilities to trigger information disclosure, denial of service and remote code execution on the targeted system.

 


Impact

  • Denial of Service
  • Remote Code Execution
  • Information Disclosure

System / Technologies affected

BIG-IP

  • 17.1.0
  • 16.1.0 - 16.1.4
  • 15.1.0 - 15.1.8
  • 14.1.0 - 14.1.5
  • 13.1.0 - 13.1.5

 

BIG-IP (APM)

  • 16.1.0 - 16.1.3
  • 15.1.0 - 15.1.8
  • 14.1.0 - 14.1.5

 

BIG-IP (Advanced WAF/ASM)

  • 16.1.0 - 16.1.3
  • 15.1.0 - 15.1.8
  • 14.1.0 - 14.1.5
  • 13.1.0 - 13.1.5

 

NGINX App Protect WAF

  • 4.0.0 - 4.1.0
  • 3.3.0 - 3.12.2

 

BIG-IP Next SPK

  • 1.6.0 - 1.8.2
  • 1.5.0
 

Solutions

Before installation of the software, please visit the vendor web-site for more details.

 

Apply fixes issued by the vendor:


Vulnerability Identifier


Source


Related Link