K10133477 : BIG-IP IPsec IKE peer listener vulnerability CVE-2016-5736

Security Advisory Description

The anonymous IPsec IKE peer configuration object is present and enabled in the default configuration. The settings of the anonymous IPsec IKE peer object allow an arbitrary peer to establish IKE phase 1 without certificate validation or a pre-shared key which may expose phase 2 negotiations to a brute force attack. (CVE-2016-5736)
Impact
For BIG-IP systems configured with IPsec tunnels, the default anonymous IPsec IKE peer configuration can allow a remote attacker to cause a denial-of-service (DoS) attack or inject traffic into local networks.