CVE-2015-7393

Published: Jan 12, 2016Modified: May 6, 2026

7.4

Vector

CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 1.4 / Impact: 5.9

Source: NVD

Description

dcoep in BIG-IP LTM, Analytics, APM, ASM, and Link Controller 11.2.0 through 11.6.0 and 12.0.0 before 12.0.0 HF1, BIG-IP AAM 11.4.0 through 11.6.0 and 12.0.0 before 12.0.0 HF1, BIG-IP AFM and PEM 11.3.0 through 11.6.0 and 12.0.0 before 12.0.0 HF1, BIG-IP DNS 12.0.0 before 12.0.0 HF1, BIG-IP Edge Gateway, WebAccelerator, and WOM 11.2.0 through 11.3.0, BIG-IP GTM 11.2.0 through 11.6.0, BIG-IP PSM 11.2.0 through 11.4.1, Enterprise Manager 3.0.0 through 3.1.1, BIG-IQ Cloud 4.0.0 through 4.5.0, BIG-IQ Device 4.2.0 through 4.5.0, BIG-IQ Security 4.0.0 through 4.5.0, BIG-IQ ADC 4.5.0, BIG-IQ Centralized Management 4.6.0, and BIG-IQ Cloud and Orchestration 1.0.0 allows local users with advanced shell (bash) access to gain privileges via unspecified vectors.

Affected (96)

Products: F5: Big Iq Application Delivery Controller, Big Ip Application Security Manager, Big Iq Security, Big Ip Wan Optimization Manager, Big Ip Global Traffic Manager, Big Ip Global Traffic Manager11.2.0, Big Iq Centralized Management, Big Ip Analytics, Big Ip Advanced Firewall Manager, Big Ip Domain Name System, Big Ip Protocol Security Module, Big Iq Cloud, Big Iq Cloud And Orchestration, Big Ip Policy Enforcement Manager, Big Ip Access Policy Manager, Big Ip Application Acceleration Manager, Big Ip Edge Gateway, Big Iq Device, Big Ip Local Traffic Manager, Big Ip Webaccelerator

20 products

Big Iq Application Delivery Controller

Big Ip Application Security Manager

Big Iq Security

Big Ip Wan Optimization Manager

Big Ip Global Traffic Manager

Big Ip Global Traffic Manager11.2.0

Big Iq Centralized Management

Big Ip Analytics

Big Ip Advanced Firewall Manager

Big Ip Domain Name System

Big Ip Protocol Security Module

Big Iq Cloud

Big Iq Cloud And Orchestration

Big Ip Policy Enforcement Manager

Big Ip Access Policy Manager

Big Ip Application Acceleration Manager

Big Ip Edge Gateway

Big Iq Device

Big Ip Local Traffic Manager

Big Ip Webaccelerator

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
F5 Big Iq Application Delivery Controller	Version 4.5.0

Configuration B

8 vulnerable

Vulnerable Software	Affected Versions
F5 Big Ip Application Security Manager	Version 11.2.0
F5 Big Ip Application Security Manager	Version 11.2.1
F5 Big Ip Application Security Manager	Version 11.3.0
F5 Big Ip Application Security Manager	Version 11.4.0
F5 Big Ip Application Security Manager	Version 11.4.1
F5 Big Ip Application Security Manager	Version 11.5.1
F5 Big Ip Application Security Manager	Version 11.6.0
F5 Big Ip Application Security Manager	Version 12.0.0

Configuration C

6 vulnerable

Vulnerable Software	Affected Versions
F5 Big Iq Security	Version 4.0.0
F5 Big Iq Security	Version 4.1.0
F5 Big Iq Security	Version 4.2.0
F5 Big Iq Security	Version 4.3.0
F5 Big Iq Security	Version 4.4.0
F5 Big Iq Security	Version 4.5.0

Configuration D

3 vulnerable

Vulnerable Software	Affected Versions
F5 Big Ip Wan Optimization Manager	Version 11.2.0
F5 Big Ip Wan Optimization Manager	Version 11.2.1
F5 Big Ip Wan Optimization Manager	Version 11.3.0

Configuration E

7 vulnerable

Vulnerable Software	Affected Versions
F5 Big Ip Global Traffic Manager	Version 11.2.1
F5 Big Ip Global Traffic Manager	Version 11.3.0
F5 Big Ip Global Traffic Manager	Version 11.4.0
F5 Big Ip Global Traffic Manager	Version 11.4.1
F5 Big Ip Global Traffic Manager	Version 11.5.1
F5 Big Ip Global Traffic Manager	Version 11.6.0
F5 Big Ip Global Traffic Manager11.2.0	All versions

Configuration F

1 vulnerable

Vulnerable Software	Affected Versions
F5 Big Iq Centralized Management	Version 4.6.0

Configuration G

11 vulnerable

Vulnerable Software	Affected Versions
F5 Big Ip Analytics	Version 11.0.0
F5 Big Ip Analytics	Version 11.1.0
F5 Big Ip Analytics	Version 11.2.0
F5 Big Ip Analytics	Version 11.2.1
F5 Big Ip Analytics	Version 11.3.0
F5 Big Ip Analytics	Version 11.4.0
F5 Big Ip Analytics	Version 11.4.1
F5 Big Ip Analytics	Version 11.5.0
F5 Big Ip Analytics	Version 11.5.1
F5 Big Ip Analytics	Version 11.6.0
F5 Big Ip Analytics	Version 12.0.0

Configuration H

7 vulnerable

Vulnerable Software	Affected Versions
F5 Big Ip Advanced Firewall Manager	Version 11.3.0
F5 Big Ip Advanced Firewall Manager	Version 11.4.0
F5 Big Ip Advanced Firewall Manager	Version 11.4.1
F5 Big Ip Advanced Firewall Manager	Version 11.5.0
F5 Big Ip Advanced Firewall Manager	Version 11.5.1
F5 Big Ip Advanced Firewall Manager	Version 11.6.0
F5 Big Ip Advanced Firewall Manager	Version 12.0.0

Configuration I

1 vulnerable

Vulnerable Software	Affected Versions
F5 Big Ip Domain Name System	Version 12.0.0

Configuration J

5 vulnerable

Vulnerable Software	Affected Versions
F5 Big Ip Protocol Security Module	Version 11.2.0
F5 Big Ip Protocol Security Module	Version 11.2.1
F5 Big Ip Protocol Security Module	Version 11.3.0
F5 Big Ip Protocol Security Module	Version 11.4.0
F5 Big Ip Protocol Security Module	Version 11.4.1

Configuration K

6 vulnerable

Vulnerable Software	Affected Versions
F5 Big Iq Cloud	Version 4.0.0
F5 Big Iq Cloud	Version 4.1.0
F5 Big Iq Cloud	Version 4.2.0
F5 Big Iq Cloud	Version 4.3.0
F5 Big Iq Cloud	Version 4.4.0
F5 Big Iq Cloud	Version 4.5.0

Configuration L

1 vulnerable

Vulnerable Software	Affected Versions
F5 Big Iq Cloud And Orchestration	Version 1.0.0

Configuration M

7 vulnerable

Vulnerable Software	Affected Versions
F5 Big Ip Policy Enforcement Manager	Version 11.3.0
F5 Big Ip Policy Enforcement Manager	Version 11.4.0
F5 Big Ip Policy Enforcement Manager	Version 11.4.1
F5 Big Ip Policy Enforcement Manager	Version 11.5.0
F5 Big Ip Policy Enforcement Manager	Version 11.5.1
F5 Big Ip Policy Enforcement Manager	Version 11.6.0
F5 Big Ip Policy Enforcement Manager	Version 12.0.0

Configuration N

8 vulnerable

Vulnerable Software	Affected Versions
F5 Big Ip Access Policy Manager	Version 11.2.0
F5 Big Ip Access Policy Manager	Version 11.2.1
F5 Big Ip Access Policy Manager	Version 11.3.0
F5 Big Ip Access Policy Manager	Version 11.4.0
F5 Big Ip Access Policy Manager	Version 11.5.0
F5 Big Ip Access Policy Manager	Version 11.5.1
F5 Big Ip Access Policy Manager	Version 11.6.0
F5 Big Ip Access Policy Manager	Version 12.0.0

Configuration O

6 vulnerable

Vulnerable Software	Affected Versions
F5 Big Ip Application Acceleration Manager	Version 11.4.0
F5 Big Ip Application Acceleration Manager	Version 11.4.1
F5 Big Ip Application Acceleration Manager	Version 11.5.0
F5 Big Ip Application Acceleration Manager	Version 11.5.1
F5 Big Ip Application Acceleration Manager	Version 11.6.0
F5 Big Ip Application Acceleration Manager	Version 12.0.0

Configuration P

3 vulnerable

Vulnerable Software	Affected Versions
F5 Big Ip Edge Gateway	Version 11.2.0
F5 Big Ip Edge Gateway	Version 11.2.1
F5 Big Ip Edge Gateway	Version 11.3.0

Configuration Q

4 vulnerable

Vulnerable Software	Affected Versions
F5 Big Iq Device	Version 4.2.0
F5 Big Iq Device	Version 4.3.0
F5 Big Iq Device	Version 4.4.0
F5 Big Iq Device	Version 4.5.0

Configuration R

8 vulnerable

Vulnerable Software	Affected Versions
F5 Big Ip Local Traffic Manager	Version 11.2.0
F5 Big Ip Local Traffic Manager	Version 11.2.1
F5 Big Ip Local Traffic Manager	Version 11.3.0
F5 Big Ip Local Traffic Manager	Version 11.4.0
F5 Big Ip Local Traffic Manager	Version 11.4.1
F5 Big Ip Local Traffic Manager	Version 11.5.1
F5 Big Ip Local Traffic Manager	Version 11.6.0
F5 Big Ip Local Traffic Manager	Version 12.0.0