#VU22977 Permissions, Privileges, and Access Controls in F5 Networks products - CVE-2019-6664
Vulnerability identifier: #VU22977
Vulnerability risk: Low
CVSSv4.0: 1.7 [CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/U:Clear]
CVE-ID: CVE-2019-6664
CWE-ID:
CWE-264
Exploitation vector: Network
Exploit availability: No
Vulnerable software:
BIG-IP
Hardware solutions /
Firmware
BIG-IP LTM
Hardware solutions /
Security hardware applicances
BIG-IP AFM
Hardware solutions /
Security hardware applicances
BIG-IP Analytics
Hardware solutions /
Security hardware applicances
BIG-IP APM
Hardware solutions /
Security hardware applicances
BIG-IP ASM
Hardware solutions /
Security hardware applicances
BIG-IP FPS
Hardware solutions /
Security hardware applicances
BIG-IP GTM
Hardware solutions /
Security hardware applicances
BIG-IP PEM
Hardware solutions /
Security hardware applicances
BIG-IP AAM
Hardware solutions /
Routers & switches, VoIP, GSM, etc
BIG-IP DNS
Hardware solutions /
Routers & switches, VoIP, GSM, etc
BIG-IP Edge Gateway
Hardware solutions /
Routers & switches, VoIP, GSM, etc
BIG-IP Link Controller
Hardware solutions /
Routers & switches, VoIP, GSM, etc
BIG-IP WebAccelerator
Hardware solutions /
Routers & switches, VoIP, GSM, etc
Vendor: F5 Networks
Description
The vulnerability allows a remote attacker to gain access to otherwise restricted functionality.
The vulnerability exists due to network protections on the management port do not follow current best practices, under certain conditions. The default firewall rules for the management interface are not reliably reinstalled after first boot. As a result, a remote attacker can expose the management interface.
Mitigation
Install updates from vendor's website.
Vulnerable software versions
BIG-IP: 14.1.0, 15.0.0
BIG-IP LTM: 14.1.0 - 15.0.0
BIG-IP AAM: 14.1.0 - 15.0.0
BIG-IP AFM: 14.1.0 - 15.0.0
BIG-IP Analytics: 14.1.0 - 15.0.0
BIG-IP APM: 14.1.0 - 15.0.0
BIG-IP ASM: 14.1.0 - 15.0.0
BIG-IP DNS: 14.1.0 - 15.0.0
BIG-IP Edge Gateway: 14.1.0 - 15.0.0
BIG-IP FPS: 14.1.0 - 15.0.0
BIG-IP GTM: 14.1.0 - 15.0.0
BIG-IP Link Controller: 14.1.0 - 15.0.0
BIG-IP PEM: 14.1.0 - 15.0.0
BIG-IP WebAccelerator: 14.1.0 - 15.0.0
External links
https://support.f5.com/csp/article/K03126093
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
