Vulnerability CVE-2019-6675 - CERT Civis.Net

Vulnerability Name:

CVE-2019-6675 (CCN-172207)

Assigned:

2019-11-26

Published:

2019-11-26

Updated:

2019-12-18

Summary:

BIG-IP configurations using Active Directory, LDAP, or Client Certificate LDAP for management authentication with multiple servers are exposed to a vulnerability which allows an authentication bypass. This can result in a complete compromise of the system. This issue only impacts specific engineering hotfixes using the aforementioned authentication configuration.
Note: This vulnerability does not affect any of the BIG-IP major, minor or maintenance releases you obtained from downloads.f5.com. The affected Engineering Hotfix builds are as follows: Hotfix-BIGIP-14.1.0.3.0.79.6-ENG.iso, Hotfix-BIGIP-14.1.0.3.0.97.6-ENG.iso, Hotfix-BIGIP-14.1.0.3.0.99.6-ENG.iso, Hotfix-BIGIP-14.1.0.5.0.15.5-ENG.iso, Hotfix-BIGIP-14.1.0.5.0.36.5-ENG.iso, Hotfix-BIGIP-14.1.0.5.0.40.5-ENG.iso, Hotfix-BIGIP-14.1.0.6.0.11.9-ENG.iso, Hotfix-BIGIP-14.1.0.6.0.14.9-ENG.iso, Hotfix-BIGIP-14.1.0.6.0.68.9-ENG.iso, Hotfix-BIGIP-14.1.0.6.0.70.9-ENG.iso, Hotfix-BIGIP-14.1.2.0.11.37-ENG.iso, Hotfix-BIGIP-14.1.2.0.18.37-ENG.iso, Hotfix-BIGIP-14.1.2.0.32.37-ENG.iso, Hotfix-BIGIP-14.1.2.1.0.46.4-ENG.iso, Hotfix-BIGIP-14.1.2.1.0.14.4-ENG.iso, Hotfix-BIGIP-14.1.2.1.0.16.4-ENG.iso, Hotfix-BIGIP-14.1.2.1.0.34.4-ENG.iso, Hotfix-BIGIP-14.1.2.1.0.97.4-ENG.iso, Hotfix-BIGIP-14.1.2.1.0.99.4-ENG.iso, Hotfix-BIGIP-14.1.2.1.0.105.4-ENG.iso, Hotfix-BIGIP-14.1.2.1.0.111.4-ENG.iso, Hotfix-BIGIP-14.1.2.1.0.115.4-ENG.iso, Hotfix-BIGIP-14.1.2.1.0.122.4-ENG.iso, Hotfix-BIGIP-15.0.1.0.33.11-ENG.iso, Hotfix-BIGIP-15.0.1.0.48.11-ENG.iso

CVSS v3 Severity:

9.8 Critical (CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
8.5 High (Temporal CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C)

Exploitability Metrics:	Attack Vector (AV): Network Attack Complexity (AC): Low Privileges Required (PR): None User Interaction (UI): None
Scope:	Scope (S): Unchanged
Impact Metrics:	Confidentiality (C): High Integrity (I): High Availibility (A): High

9.8 Critical (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
8.5 High (CCN Temporal CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C)

Exploitability Metrics:	Attack Vector (AV): Network Attack Complexity (AC): Low Privileges Required (PR): None User Interaction (UI): None
Scope:	Scope (S): Unchanged
Impact Metrics:	Confidentiality (C): High Integrity (I): High Availibility (A): High

CVSS v2 Severity:

7.5 High (CVSS v2 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Low Authentication (Au): None
Impact Metrics:	Confidentiality (C): Partial Integrity (I): Partial Availibility (A): Partial

10.0 High (CCN CVSS v2 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Low Athentication (Au): None
Impact Metrics:	Confidentiality (C): Complete Integrity (I): Complete Availibility (A): Complete

Vulnerability Type:

Vulnerability Consequences:

Bypass Security

References:

Source: MITRE
Type: CNA
CVE-2019-6675

Source: XF
Type: UNKNOWN
f5-cve20196675-sec-bypass(172207)

Source: CCN
Type: F5 Security Advisory K55655944
BIG-IP Engineering Hotfix authentication bypass vulnerability CVE-2019-6675

Source: CONFIRM
Type: Vendor Advisory
https://support.f5.com/csp/article/K55655944

Source: CONFIRM
Type: Vendor Advisory
https://support.f5.com/csp/article/K55655944?utm_source=f5support&utm_medium=RSS

Vulnerable Configuration:

Configuration 1:

cpe:/a:f5:big-ip_link_controller:14.1.0.3.0.79.6-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_link_controller:14.1.0.3.0.97.6-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_link_controller:14.1.0.3.0.99.6-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_link_controller:14.1.0.5.0.15.5-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_link_controller:14.1.0.5.0.36.5-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_link_controller:14.1.0.5.0.40.5-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_link_controller:14.1.0.6.0.11.9-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_link_controller:14.1.0.6.0.14.9-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_link_controller:14.1.0.6.0.68.9-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_link_controller:14.1.0.6.0.70.9-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_link_controller:14.1.2.0.11.37-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_link_controller:14.1.2.0.18.37-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_link_controller:14.1.2.0.32.37-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_link_controller:14.1.2.1.0.14.4-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_link_controller:14.1.2.1.0.16.4-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_link_controller:14.1.2.1.0.34.4-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_link_controller:14.1.2.1.0.46.4-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_link_controller:14.1.2.1.0.97.4-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_link_controller:14.1.2.1.0.99.4-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_link_controller:14.1.2.1.0.105.4-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_link_controller:14.1.2.1.0.111.4-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_link_controller:14.1.2.1.0.115.4-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_link_controller:14.1.2.1.0.122.4-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_link_controller:*:*:*:*:*:*:*:* (Version >= 15.0.1.0.33.11-eng_hotfix and <= 15.0.1.0.48.11-eng_hotfix)

Configuration 2:

cpe:/a:f5:big-ip_access_policy_manager:14.1.0.3.0.79.6-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_access_policy_manager:14.1.0.3.0.97.6-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_access_policy_manager:14.1.0.3.0.99.6-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_access_policy_manager:14.1.0.5.0.15.5-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_access_policy_manager:14.1.0.5.0.36.5-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_access_policy_manager:14.1.0.5.0.40.5-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_access_policy_manager:14.1.0.6.0.11.9-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_access_policy_manager:14.1.0.6.0.14.9-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_access_policy_manager:14.1.0.6.0.68.9-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_access_policy_manager:14.1.0.6.0.70.9-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_access_policy_manager:14.1.2.0.11.37-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_access_policy_manager:14.1.2.0.18.37-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_access_policy_manager:14.1.2.0.32.37-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_access_policy_manager:14.1.2.1.0.14.4-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_access_policy_manager:14.1.2.1.0.16.4-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_access_policy_manager:14.1.2.1.0.34.4-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_access_policy_manager:14.1.2.1.0.46.4-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_access_policy_manager:14.1.2.1.0.97.4-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_access_policy_manager:14.1.2.1.0.99.4-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_access_policy_manager:14.1.2.1.0.105.4-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_access_policy_manager:14.1.2.1.0.111.4-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_access_policy_manager:14.1.2.1.0.115.4-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_access_policy_manager:14.1.2.1.0.122.4-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:* (Version >= 15.0.1.0.33.11-eng_hotfix and <= 15.0.1.0.48.11-eng_hotfix)

Configuration 3:

cpe:/a:f5:big-ip_advanced_firewall_manager:14.1.0.3.0.79.6-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_advanced_firewall_manager:14.1.0.3.0.97.6-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_advanced_firewall_manager:14.1.0.3.0.99.6-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_advanced_firewall_manager:14.1.0.5.0.15.5-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_advanced_firewall_manager:14.1.0.5.0.36.5-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_advanced_firewall_manager:14.1.0.5.0.40.5-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_advanced_firewall_manager:14.1.0.6.0.11.9-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_advanced_firewall_manager:14.1.0.6.0.14.9-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_advanced_firewall_manager:14.1.0.6.0.68.9-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_advanced_firewall_manager:14.1.0.6.0.70.9-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_advanced_firewall_manager:14.1.2.0.11.37-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_advanced_firewall_manager:14.1.2.0.18.37-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_advanced_firewall_manager:14.1.2.0.32.37-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_advanced_firewall_manager:14.1.2.1.0.14.4-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_advanced_firewall_manager:14.1.2.1.0.16.4-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_advanced_firewall_manager:14.1.2.1.0.34.4-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_advanced_firewall_manager:14.1.2.1.0.46.4-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_advanced_firewall_manager:14.1.2.1.0.97.4-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_advanced_firewall_manager:14.1.2.1.0.99.4-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_advanced_firewall_manager:14.1.2.1.0.105.4-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_advanced_firewall_manager:14.1.2.1.0.111.4-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_advanced_firewall_manager:14.1.2.1.0.115.4-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_advanced_firewall_manager:14.1.2.1.0.122.4-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:* (Version >= 15.0.1.0.33.11-eng_hotfix and <= 15.0.1.0.48.11-eng_hotfix)

Configuration 4:

cpe:/a:f5:big-ip_application_acceleration_manager:14.1.0.3.0.79.6-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_application_acceleration_manager:14.1.0.3.0.97.6-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_application_acceleration_manager:14.1.0.3.0.99.6-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_application_acceleration_manager:14.1.0.5.0.15.5-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_application_acceleration_manager:14.1.0.5.0.36.5-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_application_acceleration_manager:14.1.0.5.0.40.5-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_application_acceleration_manager:14.1.0.6.0.11.9-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_application_acceleration_manager:14.1.0.6.0.14.9-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_application_acceleration_manager:14.1.0.6.0.68.9-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_application_acceleration_manager:14.1.0.6.0.70.9-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_application_acceleration_manager:14.1.2.0.11.37-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_application_acceleration_manager:14.1.2.0.18.37-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_application_acceleration_manager:14.1.2.0.32.37-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_application_acceleration_manager:14.1.2.1.0.14.4-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_application_acceleration_manager:14.1.2.1.0.16.4-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_application_acceleration_manager:14.1.2.1.0.34.4-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_application_acceleration_manager:14.1.2.1.0.46.4-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_application_acceleration_manager:14.1.2.1.0.97.4-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_application_acceleration_manager:14.1.2.1.0.99.4-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_application_acceleration_manager:14.1.2.1.0.105.4-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_application_acceleration_manager:14.1.2.1.0.111.4-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_application_acceleration_manager:14.1.2.1.0.115.4-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_application_acceleration_manager:14.1.2.1.0.122.4-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:* (Version >= 15.0.1.0.33.11-eng_hotfix and <= 15.0.1.0.48.11-eng_hotfix)

Configuration 5:

cpe:/a:f5:big-ip_application_security_manager:14.1.0.3.0.79.6-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_application_security_manager:14.1.0.3.0.97.6-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_application_security_manager:14.1.0.3.0.99.6-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_application_security_manager:14.1.0.5.0.15.5-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_application_security_manager:14.1.0.5.0.36.5-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_application_security_manager:14.1.0.5.0.40.5-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_application_security_manager:14.1.0.6.0.11.9-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_application_security_manager:14.1.0.6.0.14.9-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_application_security_manager:14.1.0.6.0.68.9-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_application_security_manager:14.1.0.6.0.70.9-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_application_security_manager:14.1.2.0.11.37-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_application_security_manager:14.1.2.0.18.37-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_application_security_manager:14.1.2.0.32.37-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_application_security_manager:14.1.2.1.0.14.4-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_application_security_manager:14.1.2.1.0.16.4-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_application_security_manager:14.1.2.1.0.34.4-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_application_security_manager:14.1.2.1.0.46.4-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_application_security_manager:14.1.2.1.0.97.4-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_application_security_manager:14.1.2.1.0.99.4-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_application_security_manager:14.1.2.1.0.105.4-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_application_security_manager:14.1.2.1.0.111.4-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_application_security_manager:14.1.2.1.0.115.4-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_application_security_manager:14.1.2.1.0.122.4-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:* (Version >= 15.0.1.0.33.11-eng_hotfix and <= 15.0.1.0.48.11-eng_hotfix)

Configuration 6:

cpe:/a:f5:big-ip_fraud_protection_service:14.1.0.3.0.79.6-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_fraud_protection_service:14.1.0.3.0.97.6-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_fraud_protection_service:14.1.0.3.0.99.6-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_fraud_protection_service:14.1.0.5.0.15.5-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_fraud_protection_service:14.1.0.5.0.36.5-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_fraud_protection_service:14.1.0.5.0.40.5-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_fraud_protection_service:14.1.0.6.0.11.9-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_fraud_protection_service:14.1.0.6.0.14.9-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_fraud_protection_service:14.1.0.6.0.68.9-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_fraud_protection_service:14.1.0.6.0.70.9-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_fraud_protection_service:14.1.2.0.11.37-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_fraud_protection_service:14.1.2.0.18.37-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_fraud_protection_service:14.1.2.0.32.37-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_fraud_protection_service:14.1.2.1.0.14.4-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_fraud_protection_service:14.1.2.1.0.16.4-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_fraud_protection_service:14.1.2.1.0.34.4-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_fraud_protection_service:14.1.2.1.0.46.4-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_fraud_protection_service:14.1.2.1.0.97.4-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_fraud_protection_service:14.1.2.1.0.99.4-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_fraud_protection_service:14.1.2.1.0.105.4-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_fraud_protection_service:14.1.2.1.0.111.4-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_fraud_protection_service:14.1.2.1.0.115.4-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_fraud_protection_service:14.1.2.1.0.122.4-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:* (Version >= 15.0.1.0.33.11-eng_hotfix and <= 15.0.1.0.48.11-eng_hotfix)

Configuration 7:

cpe:/a:f5:big-ip_local_traffic_manager:14.1.0.3.0.79.6-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_local_traffic_manager:14.1.0.3.0.97.6-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_local_traffic_manager:14.1.0.3.0.99.6-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_local_traffic_manager:14.1.0.5.0.15.5-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_local_traffic_manager:14.1.0.5.0.36.5-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_local_traffic_manager:14.1.0.5.0.40.5-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_local_traffic_manager:14.1.0.6.0.11.9-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_local_traffic_manager:14.1.0.6.0.14.9-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_local_traffic_manager:14.1.0.6.0.68.9-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_local_traffic_manager:14.1.0.6.0.70.9-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_local_traffic_manager:14.1.2.0.11.37-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_local_traffic_manager:14.1.2.0.18.37-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_local_traffic_manager:14.1.2.0.32.37-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_local_traffic_manager:14.1.2.1.0.14.4-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_local_traffic_manager:14.1.2.1.0.16.4-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_local_traffic_manager:14.1.2.1.0.34.4-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_local_traffic_manager:14.1.2.1.0.46.4-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_local_traffic_manager:14.1.2.1.0.97.4-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_local_traffic_manager:14.1.2.1.0.99.4-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_local_traffic_manager:14.1.2.1.0.105.4-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_local_traffic_manager:14.1.2.1.0.111.4-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_local_traffic_manager:14.1.2.1.0.115.4-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_local_traffic_manager:14.1.2.1.0.122.4-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:* (Version >= 15.0.1.0.33.11-eng_hotfix and <= 15.0.1.0.48.11-eng_hotfix)

Configuration 8:

cpe:/a:f5:big-ip_policy_enforcement_manager:14.1.0.3.0.79.6-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_policy_enforcement_manager:14.1.0.3.0.97.6-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_policy_enforcement_manager:14.1.0.3.0.99.6-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_policy_enforcement_manager:14.1.0.5.0.15.5-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_policy_enforcement_manager:14.1.0.5.0.36.5-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_policy_enforcement_manager:14.1.0.5.0.40.5-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_policy_enforcement_manager:14.1.0.6.0.11.9-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_policy_enforcement_manager:14.1.0.6.0.14.9-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_policy_enforcement_manager:14.1.0.6.0.68.9-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_policy_enforcement_manager:14.1.0.6.0.70.9-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_policy_enforcement_manager:14.1.2.0.11.37-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_policy_enforcement_manager:14.1.2.0.18.37-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_policy_enforcement_manager:14.1.2.0.32.37-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_policy_enforcement_manager:14.1.2.1.0.14.4-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_policy_enforcement_manager:14.1.2.1.0.16.4-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_policy_enforcement_manager:14.1.2.1.0.34.4-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_policy_enforcement_manager:14.1.2.1.0.46.4-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_policy_enforcement_manager:14.1.2.1.0.97.4-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_policy_enforcement_manager:14.1.2.1.0.99.4-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_policy_enforcement_manager:14.1.2.1.0.105.4-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_policy_enforcement_manager:14.1.2.1.0.111.4-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_policy_enforcement_manager:14.1.2.1.0.115.4-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_policy_enforcement_manager:14.1.2.1.0.122.4-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:* (Version >= 15.0.1.0.33.11-eng_hotfix and <= 15.0.1.0.48.11-eng_hotfix)

Configuration 9:

cpe:/a:f5:big-ip_analytics:14.1.0.3.0.79.6-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_analytics:14.1.0.3.0.97.6-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_analytics:14.1.0.3.0.99.6-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_analytics:14.1.0.5.0.15.5-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_analytics:14.1.0.5.0.36.5-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_analytics:14.1.0.5.0.40.5-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_analytics:14.1.0.6.0.11.9-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_analytics:14.1.0.6.0.14.9-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_analytics:14.1.0.6.0.68.9-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_analytics:14.1.0.6.0.70.9-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_analytics:14.1.2.0.11.37-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_analytics:14.1.2.0.18.37-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_analytics:14.1.2.0.32.37-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_analytics:14.1.2.1.0.14.4-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_analytics:14.1.2.1.0.16.4-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_analytics:14.1.2.1.0.34.4-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_analytics:14.1.2.1.0.46.4-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_analytics:14.1.2.1.0.97.4-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_analytics:14.1.2.1.0.99.4-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_analytics:14.1.2.1.0.105.4-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_analytics:14.1.2.1.0.111.4-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_analytics:14.1.2.1.0.115.4-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_analytics:14.1.2.1.0.122.4-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_analytics:*:*:*:*:*:*:*:* (Version >= 15.0.1.0.33.11-eng_hotfix and <= 15.0.1.0.48.11-eng_hotfix)

Configuration 10:

cpe:/a:f5:big-ip_domain_name_system:14.1.0.3.0.79.6-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_domain_name_system:14.1.0.3.0.97.6-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_domain_name_system:14.1.0.3.0.99.6-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_domain_name_system:14.1.0.5.0.15.5-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_domain_name_system:14.1.0.5.0.36.5-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_domain_name_system:14.1.0.5.0.40.5-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_domain_name_system:14.1.0.6.0.11.9-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_domain_name_system:14.1.0.6.0.14.9-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_domain_name_system:14.1.0.6.0.68.9-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_domain_name_system:14.1.0.6.0.70.9-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_domain_name_system:14.1.2.0.11.37-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_domain_name_system:14.1.2.0.18.37-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_domain_name_system:14.1.2.0.32.37-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_domain_name_system:14.1.2.1.0.14.4-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_domain_name_system:14.1.2.1.0.16.4-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_domain_name_system:14.1.2.1.0.34.4-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_domain_name_system:14.1.2.1.0.46.4-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_domain_name_system:14.1.2.1.0.97.4-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_domain_name_system:14.1.2.1.0.99.4-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_domain_name_system:14.1.2.1.0.105.4-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_domain_name_system:14.1.2.1.0.111.4-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_domain_name_system:14.1.2.1.0.115.4-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_domain_name_system:14.1.2.1.0.122.4-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:* (Version >= 15.0.1.0.33.11-eng_hotfix and <= 15.0.1.0.48.11-eng_hotfix)

Configuration 11:

cpe:/a:f5:big-ip_global_traffic_manager:14.1.0.3.0.79.6-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_global_traffic_manager:14.1.0.3.0.97.6-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_global_traffic_manager:14.1.0.3.0.99.6-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_global_traffic_manager:14.1.0.5.0.15.5-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_global_traffic_manager:14.1.0.5.0.36.5-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_global_traffic_manager:14.1.0.5.0.40.5-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_global_traffic_manager:14.1.0.6.0.11.9-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_global_traffic_manager:14.1.0.6.0.14.9-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_global_traffic_manager:14.1.0.6.0.68.9-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_global_traffic_manager:14.1.0.6.0.70.9-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_global_traffic_manager:14.1.2.0.11.37-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_global_traffic_manager:14.1.2.0.18.37-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_global_traffic_manager:14.1.2.0.32.37-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_global_traffic_manager:14.1.2.1.0.14.4-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_global_traffic_manager:14.1.2.1.0.16.4-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_global_traffic_manager:14.1.2.1.0.34.4-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_global_traffic_manager:14.1.2.1.0.46.4-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_global_traffic_manager:14.1.2.1.0.97.4-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_global_traffic_manager:14.1.2.1.0.99.4-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_global_traffic_manager:14.1.2.1.0.105.4-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_global_traffic_manager:14.1.2.1.0.111.4-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_global_traffic_manager:14.1.2.1.0.115.4-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_global_traffic_manager:14.1.2.1.0.122.4-eng_hotfix:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:* (Version >= 15.0.1.0.33.11-eng_hotfix and <= 15.0.1.0.48.11-eng_hotfix)

Denotes that component is vulnerable