CVE-2017-6128
7.5
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Exploitability: 3.9 / Impact: 3.6
Source: NVD
Description
An attacker may be able to cause a denial-of-service (DoS) attack against the sshd component in F5 BIG-IP, Enterprise Manager, BIG-IQ, and iWorkflow.
Affected (103)
Products: F5: Big Ip Local Traffic Manager, Big Ip Application Acceleration Manager, Big Ip Advanced Firewall Manager, Big Ip Analytics, Big Ip Access Policy Manager, Big Ip Application Security Manager, Big Ip Edge Gateway, Big Ip Global Traffic Manager, Big Ip Link Controller, Big Ip Policy Enforcement Manager, Big Ip Protocol Security Module, Big Ip Webaccelerator, Big Ip Websafe, Enterprise Manager, Big Iq Cloud, Big Iq Device, Big Iq Security, Big Iq Application Delivery Controller, Big Iq Centralized Management, Big Iq Cloud And Orchestration, F5 Iworkflow
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| Version 11.2.1 |
Configuration B
| Vulnerable Software | Affected Versions |
|---|---|
| Version 11.4.0 |
Configuration C
| Vulnerable Software | Affected Versions |
|---|---|
| Version 11.4.0 |
Configuration D
| Vulnerable Software | Affected Versions |
|---|---|
| Version 11.2.1 |
Configuration E
| Vulnerable Software | Affected Versions |
|---|---|
| Version 11.2.1 |
Configuration F
| Vulnerable Software | Affected Versions |
|---|---|
| Version 11.2.1 |
Configuration G
| Vulnerable Software | Affected Versions |
|---|---|
| Version 11.2.1 |
Configuration H
| Vulnerable Software | Affected Versions |
|---|---|
| Version 11.2.1 |
Configuration I
| Vulnerable Software | Affected Versions |
|---|---|
| Version 11.2.1 |
Configuration J
| Vulnerable Software | Affected Versions |
|---|---|
| Version 11.4.0 |
Configuration K
| Vulnerable Software | Affected Versions |
|---|---|
| Version 11.4.0 |
Configuration L
| Vulnerable Software | Affected Versions |
|---|---|
| Version 11.2.1 |
Configuration M
| Vulnerable Software | Affected Versions |
|---|---|
| Version 11.6.0 |
Configuration N
| Vulnerable Software | Affected Versions |
|---|---|
| Version 3.1.1 |
Configuration O
| Vulnerable Software | Affected Versions |
|---|---|
| Version 4.4.0 |
Configuration P
| Vulnerable Software | Affected Versions |
|---|---|
| Version 4.4.0 |
Configuration Q
| Vulnerable Software | Affected Versions |
|---|---|
| Version 4.4.0 |
Configuration R
| Vulnerable Software | Affected Versions |
|---|---|
| Version 4.5.0 |
Configuration S
| Vulnerable Software | Affected Versions |
|---|---|
| Version 4.6.0 |
Configuration T
| Vulnerable Software | Affected Versions |
|---|---|
| Version 1.0.0 |
Configuration U
| Vulnerable Software | Affected Versions |
|---|---|
| Version 2.0.0 |
References (6)
Source: f5sirt@f5.com
Source: f5sirt@f5.com
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
MitigationVendor Advisory
Timeline
No history available yet.