PT-2014-4962 · F5 · F5 Big-Ip Webaccelerator+12

Published 2014-05-12 · Updated 2015-11-20 · CVE-2014-2928

Positive Technologies (AI Summary)

CVSS v2.0

7.1

High

Base vector

AV:N/AC:H/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions F5 BIG-IP LTM, APM, ASM, GTM, Link Controller, and PSM versions 10.0.0 through 10.2.4 and 11.0.0 through 11.5.1 F5 BIG-IP AAM versions 11.4.0 through 11.5.1 F5 BIG-IP AFM and PEM versions 11.3.0 through 11.5.1 F5 BIG-IP Analytics versions 11.0.0 through 11.5.1 F5 BIG-IP Edge Gateway, WebAccelerator, WOM versions 10.1.0 through 10.2.4 and 11.0.0 through 11.3.0 F5 Enterprise Manager versions 2.1.0 through 2.3.0 and 3.0.0 through 3.1.1 F5 BIG-IQ Cloud, Device, and Security versions 4.0.0 through 4.3.0

Description The issue allows remote administrators to execute arbitrary commands via shell metacharacters in the hostname element in a SOAP request to the iControl API.

Recommendations For F5 BIG-IP LTM, APM, ASM, GTM, Link Controller, and PSM versions 10.0.0 through 10.2.4 and 11.0.0 through 11.5.1, update to a version outside of the affected range. For F5 BIG-IP AAM versions 11.4.0 through 11.5.1, update to a version outside of the affected range. For F5 BIG-IP AFM and PEM versions 11.3.0 through 11.5.1, update to a version outside of the affected range. For F5 BIG-IP Analytics versions 11.0.0 through 11.5.1, update to a version outside of the affected range. For F5 BIG-IP Edge Gateway, WebAccelerator, WOM versions 10.1.0 through 10.2.4 and 11.0.0 through 11.3.0, update to a version outside of the affected range. For F5 Enterprise Manager versions 2.1.0 through 2.3.0 and 3.0.0 through 3.1.1, update to a version outside of the affected range. For F5 BIG-IQ Cloud, Device, and Security versions 4.0.0 through 4.3.0, update to a version outside of the affected range. As a temporary workaround, consider restricting access to the iControl API to minimize the risk of exploitation.

Exploit

Fix

Related Identifiers

CVE-2014-2928

Affected Products

F5 Big-Ip Apm

F5 Big-Ip Analytics

F5 Big-Ip Edge Gateway

F5 Big-Ip Gtm

F5 Big-Ip Ltm

F5 Big-Ip Link Controller

F5 Big-Ip Pem

F5 Big-Ip Wom

F5 Big-Ip Webaccelerator

F5 Big-Iq Cloud

F5 Big-Iq Device

F5 Big-Iq Security

F5 Enterprise Manager

References · 7

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/f5_icontrol_exec.rb · Exploit
• 🔥 https://exploit-db.com/exploits/34927 · Exploit
• 🔥 http://exploit-db.com/exploits/34927 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2014-2928 · Security Note
• http://support.f5.com/kb/en-us/solutions/public/15000/200/sol15220.html · Vendor Advisory
• http://seclists.org/fulldisclosure/2014/May/32 · Note
• http://osvdb.org/106728 · Note