Lucene search
HistoryNov 06, 2015 - 6:59 p.m.
CVE-2015-7394
f5
big-ip
analytics
apm
asm
link controller
ltm
cve-2015-7394
vulnerability
denial of service
9 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:S/C:C/I:C/A:C
6.7 Medium
AI Score
Confidence
Low
0.006 Low
EPSS
Percentile
77.7%
The datastor kernel module in F5 BIG-IP Analytics, APM, ASM, Link Controller, and LTM 11.1.0 before 12.0.0, BIG-IP AAM 11.4.0 before 12.0.0, BIG-IP AFM, PEM 11.3.0 before 12.0.0, BIG-IP Edge Gateway, WebAccelerator, and WOM 11.1.0 through 11.3.0, BIG-IP GTM 11.1.0 through 11.6.0, BIG-IP PSM 11.1.0 through 11.4.1, BIG-IQ Cloud and Security 4.0.0 through 4.5.0, BIG-IQ Device 4.2.0 through 4.5.0, BIG-IQ ADC 4.5.0, and Enterprise Manager 3.0.0 through 3.1.1 allows remote authenticated users to cause a denial of service or gain privileges by leveraging permission to upload and execute code.
Affected configurations
Node
f5big-iq_deviceMatch4.2.0
ORf5big-iq_deviceMatch4.3.0
ORf5big-iq_deviceMatch4.4.0
ORf5big-iq_deviceMatch4.5.0
Node
f5big-ip_policy_enforcement_managerMatch11.3.0
ORf5big-ip_policy_enforcement_managerMatch11.4.0
ORf5big-ip_policy_enforcement_managerMatch11.4.1
ORf5big-ip_policy_enforcement_managerMatch11.5.0
ORf5big-ip_policy_enforcement_managerMatch11.5.1
ORf5big-ip_policy_enforcement_managerMatch11.5.2
ORf5big-ip_policy_enforcement_managerMatch11.5.3
ORf5big-ip_policy_enforcement_managerMatch11.6.0
Node
f5big-ip_global_traffic_managerMatch11.1.0
ORf5big-ip_global_traffic_managerMatch11.2.0
ORf5big-ip_global_traffic_managerMatch11.2.1
ORf5big-ip_global_traffic_managerMatch11.3.0
ORf5big-ip_global_traffic_managerMatch11.4.0
ORf5big-ip_global_traffic_managerMatch11.4.1
ORf5big-ip_global_traffic_managerMatch11.5.0
ORf5big-ip_global_traffic_managerMatch11.5.1
ORf5big-ip_global_traffic_managerMatch11.5.2
ORf5big-ip_global_traffic_managerMatch11.5.3
ORf5big-ip_global_traffic_managerMatch11.6.0
Node
f5big-ip_analyticsMatch11.1.0
ORf5big-ip_analyticsMatch11.2.0
ORf5big-ip_analyticsMatch11.2.1
ORf5big-ip_analyticsMatch11.3.0
ORf5big-ip_analyticsMatch11.4.0
ORf5big-ip_analyticsMatch11.4.1
ORf5big-ip_analyticsMatch11.5.0
ORf5big-ip_analyticsMatch11.5.1
ORf5big-ip_analyticsMatch11.5.2
ORf5big-ip_analyticsMatch11.5.3
ORf5big-ip_analyticsMatch11.6.0
Node
f5big-ip_link_controllerMatch11.1.0
ORf5big-ip_link_controllerMatch11.2.0
ORf5big-ip_link_controllerMatch11.2.1
ORf5big-ip_link_controllerMatch11.3.0
ORf5big-ip_link_controllerMatch11.4.0
ORf5big-ip_link_controllerMatch11.4.1
ORf5big-ip_link_controllerMatch11.5.0
ORf5big-ip_link_controllerMatch11.5.1
ORf5big-ip_link_controllerMatch11.5.2
ORf5big-ip_link_controllerMatch11.5.3
ORf5big-ip_link_controllerMatch11.6.0
Node
f5big-ip_webacceleratorMatch11.1.0
ORf5big-ip_webacceleratorMatch11.2.0
ORf5big-ip_webacceleratorMatch11.2.1
ORf5big-ip_webacceleratorMatch11.3.0
Node
f5big-ip_application_security_managerMatch11.1.0
ORf5big-ip_application_security_managerMatch11.2.0
ORf5big-ip_application_security_managerMatch11.2.1
ORf5big-ip_application_security_managerMatch11.3.0
ORf5big-ip_application_security_managerMatch11.4.0
ORf5big-ip_application_security_managerMatch11.4.1
ORf5big-ip_application_security_managerMatch11.5.0
ORf5big-ip_application_security_managerMatch11.5.1
ORf5big-ip_application_security_managerMatch11.5.2
ORf5big-ip_application_security_managerMatch11.5.3
ORf5big-ip_application_security_managerMatch11.6.0
Node
f5big-iq_securityMatch4.0.0
ORf5big-iq_securityMatch4.1.0
ORf5big-iq_securityMatch4.2.0
ORf5big-iq_securityMatch4.3.0
ORf5big-iq_securityMatch4.4.0
ORf5big-iq_securityMatch4.5.0
Node
f5big-ip_wan_optimization_managerMatch11.1.0
ORf5big-ip_wan_optimization_managerMatch11.2.0
ORf5big-ip_wan_optimization_managerMatch11.2.1
ORf5big-ip_wan_optimization_managerMatch11.3.0
Node
f5big-ip_edge_gatewayMatch11.1.0
ORf5big-ip_edge_gatewayMatch11.2.0
ORf5big-ip_edge_gatewayMatch11.2.1
ORf5big-ip_edge_gatewayMatch11.3.0
Node
f5big-ip_access_policy_managerMatch11.1.0
ORf5big-ip_access_policy_managerMatch11.2.0
ORf5big-ip_access_policy_managerMatch11.2.1
ORf5big-ip_access_policy_managerMatch11.3.0
ORf5big-ip_access_policy_managerMatch11.4.0
ORf5big-ip_access_policy_managerMatch11.4.1
ORf5big-ip_access_policy_managerMatch11.5.0
ORf5big-ip_access_policy_managerMatch11.5.1
ORf5big-ip_access_policy_managerMatch11.5.2
ORf5big-ip_access_policy_managerMatch11.5.3
ORf5big-ip_access_policy_managerMatch11.6.0
Node
f5big-ip_advanced_firewall_managerMatch11.3.0
ORf5big-ip_advanced_firewall_managerMatch11.4.0
ORf5big-ip_advanced_firewall_managerMatch11.4.1
ORf5big-ip_advanced_firewall_managerMatch11.5.0
ORf5big-ip_advanced_firewall_managerMatch11.5.1
ORf5big-ip_advanced_firewall_managerMatch11.5.2
ORf5big-ip_advanced_firewall_managerMatch11.5.3
ORf5big-ip_advanced_firewall_managerMatch11.6.0
Node
f5big-ip_enterprise_managerMatch3.0.0
ORf5big-ip_enterprise_managerMatch3.1.0
ORf5big-ip_enterprise_managerMatch3.1.1
Node
f5big-ip_application_acceleration_managerMatch11.4.0
ORf5big-ip_application_acceleration_managerMatch11.4.1
ORf5big-ip_application_acceleration_managerMatch11.5.0
ORf5big-ip_application_acceleration_managerMatch11.5.1
ORf5big-ip_application_acceleration_managerMatch11.5.2
ORf5big-ip_application_acceleration_managerMatch11.5.3
ORf5big-ip_application_acceleration_managerMatch11.6.0
Node
f5big-ip_protocol_security_moduleMatch11.1.0
ORf5big-ip_protocol_security_moduleMatch11.2.0
ORf5big-ip_protocol_security_moduleMatch11.2.1
ORf5big-ip_protocol_security_moduleMatch11.3.0
ORf5big-ip_protocol_security_moduleMatch11.4.0
ORf5big-ip_protocol_security_moduleMatch11.4.1
Node
f5big-iq_cloudMatch4.0.0
ORf5big-iq_cloudMatch4.1.0
ORf5big-iq_cloudMatch4.2.0
ORf5big-iq_cloudMatch4.3.0
ORf5big-iq_cloudMatch4.4.0
ORf5big-iq_cloudMatch4.5.0
Node
f5big-ip_local_traffic_managerMatch11.1.0
ORf5big-ip_local_traffic_managerMatch11.2.0
ORf5big-ip_local_traffic_managerMatch11.2.1
ORf5big-ip_local_traffic_managerMatch11.3.0
ORf5big-ip_local_traffic_managerMatch11.4.0
ORf5big-ip_local_traffic_managerMatch11.4.1
ORf5big-ip_local_traffic_managerMatch11.5.0
ORf5big-ip_local_traffic_managerMatch11.5.1
ORf5big-ip_local_traffic_managerMatch11.5.2
ORf5big-ip_local_traffic_managerMatch11.5.3
Node
f5big-iq_adcMatch4.5.0
Related
nessus
nessus
F5 Networks BIG-IP : Datastor kernel vulnerability (K17407)
2015-10-28 00:00:00
f5
f5
K17407 : Datastor kernel vulnerability CVE-2015-7394
2015-10-27 00:00:00
SOL17407 - Datastor kernel vulnerability CVE-2015-7394
2015-10-27 00:00:00
openvas
openvas
F5 BIG-IP - Datastor kernel vulnerability CVE-2015-7394
2015-10-28 00:00:00
nvd
nvd
CVE-2015-7394
2015-11-06 18:59:03
prion
prion
Code injection
2015-11-06 18:59:00
cvelist
cvelist
CVE-2015-7394
2015-11-06 18:00:00
9 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:S/C:C/I:C/A:C
6.7 Medium
AI Score
Confidence
Low
0.006 Low
EPSS
Percentile
77.7%
Related for CVE-2015-7394