F5 Products Multiple Vulnerabilities
RISK: High Risk
TYPE: Operating Systems - Networks OS
Multiple vulnerabilities were identified in F5 Products. A remote attacker could exploit some of these vulnerabilities to trigger denial of service condition, elevation of privilege, remote code execution, sensitive information disclosure and security restriction bypass on the targeted system.
Note:
CVE-2024-36971 is being exploited in the wild. An attacker may be able to exploit this vulnerability to read or modify sensitive data or escalate privileges. The risk level is rated to High Risk.
[Updated on 2024-09-10]
Updated Impact, System / Technologies affected, Solutions, Vulnerability Identifier and Related Links.
Impact
- Remote Code Execution
- Denial of Service
- Security Restriction Bypass
- Information Disclosure
- Elevation of Privilege
System / Technologies affected
BIG-IP (all modules)
- 17.1.0 - 17.1.1
- 16.1.0 - 16.1.5
- 15.1.0 - 15.1.10
- 8.2.0 - 8.3.0
BIG-IP Next SPK
- 1.7.0 - 1.9.2
BIG-IP Next CNF
- 1.1.0 - 1.3.1
Traffix SDC
- 5.1.0 - 5.2.0
For CVE-2024-36971
Traffix SDC
- 5.2.0
Solutions
Before installation of the software, please visit the vendor web-site for more details.
Apply fixes issued by the vendor:
- https://my.f5.com/manage/s/article/K000140975
- https://my.f5.com/manage/s/article/K000140957
- https://my.f5.com/manage/s/article/K000140960
- https://my.f5.com/manage/s/article/K000140961
- https://my.f5.com/manage/s/article/K000140963
- https://my.f5.com/manage/s/article/K000140987
Vulnerability Identifier
Source
Related Link
Related Tags
Share with