Skip to main content

F5 Products Multiple Vulnerabilities

Last Update Date: 10 Sep 2024 Release Date: 9 Sep 2024 3404 Views

RISK: High Risk

TYPE: Operating Systems - Networks OS

TYPE: Networks OS

Multiple vulnerabilities were identified in F5 Products. A remote attacker could exploit some of these vulnerabilities to trigger denial of service condition, elevation of privilege, remote code execution, sensitive information disclosure and security restriction bypass on the targeted system.

 

Note:

CVE-2024-36971 is being exploited in the wild. An attacker may be able to exploit this vulnerability to read or modify sensitive data or escalate privileges. The risk level is rated to High Risk.

 

[Updated on 2024-09-10]

Updated Impact, System / Technologies affected, Solutions, Vulnerability Identifier and Related Links.


Impact

  • Remote Code Execution
  • Denial of Service
  • Security Restriction Bypass
  • Information Disclosure
  • Elevation of Privilege

System / Technologies affected

BIG-IP (all modules)

  • 17.1.0 - 17.1.1
  • 16.1.0 - 16.1.5
  • 15.1.0 - 15.1.10
  • 8.2.0 - 8.3.0

 

BIG-IP Next SPK

  • 1.7.0 - 1.9.2

 

BIG-IP Next CNF

  • 1.1.0 - 1.3.1

 

Traffix SDC

  • 5.1.0 - 5.2.0

 

For CVE-2024-36971

Traffix SDC

  • 5.2.0

Solutions

Before installation of the software, please visit the vendor web-site for more details.

 

Apply fixes issued by the vendor:


Vulnerability Identifier


Source


Related Link