PT-2015-7295 · F5 · F5 Big-Ip Edge Gateway+8

Published 2015-11-06 · Updated 2019-06-06 · CVE-2015-6546

Positive Technologies (AI Summary)

CVSS v2.0

6.1

Medium

Base vector

AV:A/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions F5 BIG-IP Analytics versions 11.0.0 through 11.5.x F5 BIG-IP APM versions 11.0.0 through 11.5.x F5 BIG-IP ASM versions 11.0.0 through 11.5.x F5 BIG-IP GTM versions 11.0.0 through 11.5.x F5 BIG-IP Link Controller versions 11.0.0 through 11.5.x F5 BIG-IP LTM versions 11.0.0 through 11.5.x F5 BIG-IP AAM versions 11.4.0 through 11.5.x F5 BIG-IP AFM versions 11.3.0 through 11.5.x F5 BIG-IP PEM versions 11.3.0 through 11.5.x F5 BIG-IP Edge Gateway versions 11.0.0 through 11.3.0 F5 BIG-IP WebAccelerator versions 11.0.0 through 11.3.0 F5 BIG-IP WOM versions 11.0.0 through 11.3.0 F5 BIG-IP PSM versions 11.0.0 through 11.4.1

Description The issue allows remote attackers to cause a denial of service via malicious traffic.

Recommendations For F5 BIG-IP Analytics versions 11.0.0 through 11.5.x, update to version 11.6.0 or later. For F5 BIG-IP APM versions 11.0.0 through 11.5.x, update to version 11.6.0 or later. For F5 BIG-IP ASM versions 11.0.0 through 11.5.x, update to version 11.6.0 or later. For F5 BIG-IP GTM versions 11.0.0 through 11.5.x, update to version 11.6.0 or later. For F5 BIG-IP Link Controller versions 11.0.0 through 11.5.x, update to version 11.6.0 or later. For F5 BIG-IP LTM versions 11.0.0 through 11.5.x, update to version 11.6.0 or later. For F5 BIG-IP AAM versions 11.4.0 through 11.5.x, update to version 11.6.0 or later. For F5 BIG-IP AFM versions 11.3.0 through 11.5.x, update to version 11.6.0 or later. For F5 BIG-IP PEM versions 11.3.0 through 11.5.x, update to version 11.6.0 or later. For F5 BIG-IP Edge Gateway versions 11.0.0 through 11.3.0, update to version 11.6.0 or later. For F5 BIG-IP WebAccelerator versions 11.0.0 through 11.3.0, update to version 11.6.0 or later. For F5 BIG-IP WOM versions 11.0.0 through 11.3.0, update to version 11.6.0 or later. For F5 BIG-IP PSM versions 11.0.0 through 11.4.1, update to version 11.6.0 or later.

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2015-6546

Affected Products

F5 Big-Ip Apm

F5 Big-Ip Analytics

F5 Big-Ip Edge Gateway

F5 Big-Ip Gtm

F5 Big-Ip Ltm

F5 Big-Ip Link Controller

F5 Big-Ip Pem

F5 Big-Ip Wom

F5 Big-Ip Webaccelerator

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2015-6546 · Security Note
• https://support.f5.com/kb/en-us/solutions/public/17000/300/sol17386.html · Vendor Advisory
• http://securitytracker.com/id/1033952 · Note