F5 Products Multiple Vulnerabilities

Multiple vulnerabilities were identified in F5 Products. A remote attacker could exploit some of these vulnerabilities to trigger denial of service condition, elevation of privilege, remote code execution, sensitive information disclosure and security restriction bypass on the targeted system.

Note:

CVE-2024-36971 is being exploited in the wild. An attacker may be able to exploit this vulnerability to read or modify sensitive data or escalate privileges. The risk level is rated to High Risk.

[Updated on 2024-09-10]

Updated Impact, System / Technologies affected, Solutions, Vulnerability Identifier and Related Links.

Impact

• Remote Code Execution
• Denial of Service
• Security Restriction Bypass
• Information Disclosure
• Elevation of Privilege

System / Technologies affected

BIG-IP (all modules)

• 17.1.0 – 17.1.1
• 16.1.0 – 16.1.5
• 15.1.0 – 15.1.10
• 8.2.0 – 8.3.0

BIG-IP Next SPK

• 1.7.0 – 1.9.2

BIG-IP Next CNF

• 1.1.0 – 1.3.1

Traffix SDC

• 5.1.0 – 5.2.0

For CVE-2024-36971

Traffix SDC

• 5.2.0

Solutions

Before installation of the software, please visit the vendor web-site for more details.

Apply fixes issued by the vendor:

• https://my.f5.com/manage/s/article/K000140975
• https://my.f5.com/manage/s/article/K000140957
• https://my.f5.com/manage/s/article/K000140960
• https://my.f5.com/manage/s/article/K000140961
• https://my.f5.com/manage/s/article/K000140963
• https://my.f5.com/manage/s/article/K000140987

Vulnerability Identifier

• CVE-2024-6409
• CVE-2014-9092
• CVE-2020-17541
• CVE-2021-23177
• CVE-2021-31566
• CVE-2024-36971

Source

• F5

Related Link

• https://my.f5.com/manage/s/article/K000140975
• https://my.f5.com/manage/s/article/K000140957
• https://my.f5.com/manage/s/article/K000140960
• https://my.f5.com/manage/s/article/K000140961
• https://my.f5.com/manage/s/article/K000140963
• https://my.f5.com/manage/s/article/K000140987