Martian address filtering vulnerability CVE-2019-6654

The BIG-IP system fails to perform martian address filtering (as defined in RFC 1812, section 5.3.7) for control plane tasks on the management interface. This may allow attackers on an adjacent system to force the BIG-IP system into processing packets with spoofed source addresses. (CVE-2019-6654)

Note: A martian packet is an IP packet on the public internet that contains a source or destination address that is reserved for special use by the Internet Assigned Numbers Authority (IANA).

Note:****Adjacent systems are IP network systems that are configured on same logical network subnet.

Impact

This vulnerability allows for remote unauthorized modification or disruption of service.