Lucene search

[email protected]CVE-2019-6680

HistoryDec 23, 2019 - 6:15 p.m.

CVE-2019-6680

2019-12-2318:15:11

[email protected]

web.nvd.nist.gov

cve-2019-6680

big-ip

hardware appliances

nvd

traffic processing

virtual server

fastl4

vip on vip

7.8 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

0.001 Low

EPSS

Percentile

42.5%

JSON

On BIG-IP versions 15.0.0-15.0.1, 14.1.0-14.1.2, 14.0.0-14.0.1, 13.1.0-13.1.3.2, 12.1.0-12.1.5, and 11.5.2-11.6.5, while processing traffic through a standard virtual server that targets a FastL4 virtual server (VIP on VIP), hardware appliances may stop responding.

Affected configurations

NVD

Node

f5big-ip_access_policy_managerRange11.5.2–11.6.5.1

f5big-ip_access_policy_managerRange12.1.0–12.1.5

f5big-ip_access_policy_managerRange13.1.0–13.1.3

f5big-ip_access_policy_managerRange14.0.0–14.0.1.1

f5big-ip_access_policy_managerRange14.1.0–14.1.2.1

f5big-ip_access_policy_managerRange15.0.0–15.0.1.1

f5big-ip_advanced_firewall_managerRange11.5.2–11.6.5.1

f5big-ip_advanced_firewall_managerRange12.1.0–12.1.5

f5big-ip_advanced_firewall_managerRange13.1.0–13.1.3

f5big-ip_advanced_firewall_managerRange14.0.0–14.0.1.1

f5big-ip_advanced_firewall_managerRange14.1.0–14.1.2.1

f5big-ip_advanced_firewall_managerRange15.0.0–15.0.1.1

f5big-ip_analyticsRange11.5.2–11.6.5.1

f5big-ip_analyticsRange12.1.0–12.1.5

f5big-ip_analyticsRange13.1.0–13.1.3

f5big-ip_analyticsRange14.0.0–14.0.1.1

f5big-ip_analyticsRange14.1.0–14.1.2.1

f5big-ip_analyticsRange15.0.0–15.0.1.1

f5big-ip_application_acceleration_managerRange11.5.2–11.6.5.1

f5big-ip_application_acceleration_managerRange12.1.0–12.1.5

f5big-ip_application_acceleration_managerRange13.1.0–13.1.3

f5big-ip_application_acceleration_managerRange14.0.0–14.0.1.1

f5big-ip_application_acceleration_managerRange14.1.0–14.1.2.1

f5big-ip_application_acceleration_managerRange15.0.0–15.0.1.1

f5big-ip_application_security_managerRange11.5.2–11.6.5.1

f5big-ip_application_security_managerRange12.1.0–12.1.5

f5big-ip_application_security_managerRange13.1.0–13.1.3

f5big-ip_application_security_managerRange14.0.0–14.0.1.1

f5big-ip_application_security_managerRange14.1.0–14.1.2.1

f5big-ip_application_security_managerRange15.0.0–15.0.1.1

f5big-ip_domain_name_systemRange11.5.2–11.6.5.1

f5big-ip_domain_name_systemRange12.1.0–12.1.5

f5big-ip_domain_name_systemRange13.1.0–13.1.3

f5big-ip_domain_name_systemRange14.0.0–14.0.1.1

f5big-ip_domain_name_systemRange14.1.0–14.1.2.1

f5big-ip_domain_name_systemRange15.0.0–15.0.1.1

f5big-ip_fraud_protection_serviceRange11.5.2–11.6.5.1

f5big-ip_fraud_protection_serviceRange12.1.0–12.1.5

f5big-ip_fraud_protection_serviceRange13.1.0–13.1.3

f5big-ip_fraud_protection_serviceRange14.0.0–14.0.1.1

f5big-ip_fraud_protection_serviceRange14.1.0–14.1.2.1

f5big-ip_fraud_protection_serviceRange15.0.0–15.0.1.1

f5big-ip_global_traffic_managerRange11.5.2–11.6.5.1

f5big-ip_global_traffic_managerRange12.1.0–12.1.5

f5big-ip_global_traffic_managerRange13.1.0–13.1.3

f5big-ip_global_traffic_managerRange14.0.0–14.0.1.1

f5big-ip_global_traffic_managerRange14.1.0–14.1.2.1

f5big-ip_global_traffic_managerRange15.0.0–15.0.1.1

f5big-ip_link_controllerRange11.5.2–11.6.5.1

f5big-ip_link_controllerRange12.1.0–12.1.5

f5big-ip_link_controllerRange13.1.0–13.1.3

f5big-ip_link_controllerRange14.0.0–14.0.1.1

f5big-ip_link_controllerRange14.1.0–14.1.2.1

f5big-ip_link_controllerRange15.0.0–15.0.1.1

f5big-ip_local_traffic_managerRange11.5.2–11.6.5.1

f5big-ip_local_traffic_managerRange12.1.0–12.1.5

f5big-ip_local_traffic_managerRange13.1.0–13.1.3

f5big-ip_local_traffic_managerRange14.0.0–14.0.1.1

f5big-ip_local_traffic_managerRange14.1.0–14.1.2.1

f5big-ip_local_traffic_managerRange15.0.0–15.0.1.1

f5big-ip_policy_enforcement_managerRange11.5.2–11.6.5.1

f5big-ip_policy_enforcement_managerRange12.1.0–12.1.5

f5big-ip_policy_enforcement_managerRange13.1.0–13.1.3

f5big-ip_policy_enforcement_managerRange14.0.0–14.0.1.1

f5big-ip_policy_enforcement_managerRange14.1.0–14.1.2.1

f5big-ip_policy_enforcement_managerRange15.0.0–15.0.1.1

CPENameOperatorVersion
f5:big-ip_access_policy_managerf5 big-ip access policy managerlt11.6.5.1
f5:big-ip_access_policy_managerf5 big-ip access policy managerle12.1.5
f5:big-ip_access_policy_managerf5 big-ip access policy managerle13.1.3
f5:big-ip_access_policy_managerf5 big-ip access policy managerlt14.0.1.1
f5:big-ip_access_policy_managerf5 big-ip access policy managerlt14.1.2.1
f5:big-ip_access_policy_managerf5 big-ip access policy managerlt15.0.1.1
f5:big-ip_advanced_firewall_managerf5 big-ip advanced firewall managerlt11.6.5.1
f5:big-ip_advanced_firewall_managerf5 big-ip advanced firewall managerle12.1.5
f5:big-ip_advanced_firewall_managerf5 big-ip advanced firewall managerle13.1.3
f5:big-ip_advanced_firewall_managerf5 big-ip advanced firewall managerlt14.0.1.1

CPE	Name	Operator	Version
f5:big-ip_access_policy_manager	f5 big-ip access policy manager	lt	11.6.5.1
f5:big-ip_access_policy_manager	f5 big-ip access policy manager	le	12.1.5
f5:big-ip_access_policy_manager	f5 big-ip access policy manager	le	13.1.3
f5:big-ip_access_policy_manager	f5 big-ip access policy manager	lt	14.0.1.1
f5:big-ip_access_policy_manager	f5 big-ip access policy manager	lt	14.1.2.1
f5:big-ip_access_policy_manager	f5 big-ip access policy manager	lt	15.0.1.1
f5:big-ip_advanced_firewall_manager	f5 big-ip advanced firewall manager	lt	11.6.5.1
f5:big-ip_advanced_firewall_manager	f5 big-ip advanced firewall manager	le	12.1.5
f5:big-ip_advanced_firewall_manager	f5 big-ip advanced firewall manager	le	13.1.3
f5:big-ip_advanced_firewall_manager	f5 big-ip advanced firewall manager	lt	14.0.1.1

Rows per page:

1-10 of 661

CNA Affected

[
  {
    "product": "BIG-IP",
    "vendor": "F5",
    "versions": [
      {
        "status": "affected",
        "version": "15.0.0-15.0.1"
      },
      {
        "status": "affected",
        "version": "14.1.0-14.1.2"
      },
      {
        "status": "affected",
        "version": "14.0.0-14.0.1"
      },
      {
        "status": "affected",
        "version": "13.1.0-13.1.3.2"
      },
      {
        "status": "affected",
        "version": "12.1.0-12.1.5"
      },
      {
        "status": "affected",
        "version": "11.5.2-11.6.5"
      }
    ]
  }
]

References

support.f5.com/csp/article/K53183580

7.8 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

0.001 Low

EPSS

Percentile

42.5%

JSON

Related for CVE-2019-6680

cvelist1 f51 nessus1 prion1 nvd1