CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2017-6143

X509 certificate verification was not correctly implemented in the IP Intelligence Subscription and IP Intelligence feed-list features, and thus the remote server's identity is not properly validated in F5 BIG-IP 12.0.0-12.1.2, 11.6.0-11.6.2, or 11.5.0-11.5.5.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.001

EPSS Ranking 30.2%

CVSS Severity

CVSS v3 Score 5.4

CVSS v2 Score 5.8

References

Products affected by CVE-2017-6143

F5 » Big-Ip Advanced Firewall Manager » Version: 11.5.1

cpe:2.3:a:f5:big-ip_advanced_firewall_manager:11.5.1
F5 » Big-Ip Advanced Firewall Manager » Version: 11.5.2

cpe:2.3:a:f5:big-ip_advanced_firewall_manager:11.5.2
F5 » Big-Ip Advanced Firewall Manager » Version: 11.5.3

cpe:2.3:a:f5:big-ip_advanced_firewall_manager:11.5.3
F5 » Big-Ip Advanced Firewall Manager » Version: 11.5.4

cpe:2.3:a:f5:big-ip_advanced_firewall_manager:11.5.4
F5 » Big-Ip Advanced Firewall Manager » Version: 11.5.4.1

cpe:2.3:a:f5:big-ip_advanced_firewall_manager:11.5.4.1
F5 » Big-Ip Advanced Firewall Manager » Version: 11.5.4.2

cpe:2.3:a:f5:big-ip_advanced_firewall_manager:11.5.4.2
F5 » Big-Ip Advanced Firewall Manager » Version: 11.5.4.2.74.291

cpe:2.3:a:f5:big-ip_advanced_firewall_manager:11.5.4.2.74.291
F5 » Big-Ip Advanced Firewall Manager » Version: 11.5.4.3

cpe:2.3:a:f5:big-ip_advanced_firewall_manager:11.5.4.3
F5 » Big-Ip Advanced Firewall Manager » Version: 11.5.4.4

cpe:2.3:a:f5:big-ip_advanced_firewall_manager:11.5.4.4
F5 » Big-Ip Advanced Firewall Manager » Version: 11.5.5

cpe:2.3:a:f5:big-ip_advanced_firewall_manager:11.5.5
F5 » Big-Ip Advanced Firewall Manager » Version: 11.6.1

cpe:2.3:a:f5:big-ip_advanced_firewall_manager:11.6.1
F5 » Big-Ip Advanced Firewall Manager » Version: 11.6.2

cpe:2.3:a:f5:big-ip_advanced_firewall_manager:11.6.2
F5 » Big-Ip Advanced Firewall Manager » Version: 12.1.0

cpe:2.3:a:f5:big-ip_advanced_firewall_manager:12.1.0
F5 » Big-Ip Advanced Firewall Manager » Version: 12.1.1

cpe:2.3:a:f5:big-ip_advanced_firewall_manager:12.1.1
F5 » Big-Ip Advanced Firewall Manager » Version: 12.1.2

cpe:2.3:a:f5:big-ip_advanced_firewall_manager:12.1.2
F5 » Big-Ip Application Security Manager » Version: 11.5.1

cpe:2.3:a:f5:big-ip_application_security_manager:11.5.1
F5 » Big-Ip Application Security Manager » Version: 11.5.2

cpe:2.3:a:f5:big-ip_application_security_manager:11.5.2
F5 » Big-Ip Application Security Manager » Version: 11.5.3

cpe:2.3:a:f5:big-ip_application_security_manager:11.5.3
F5 » Big-Ip Application Security Manager » Version: 11.5.4

cpe:2.3:a:f5:big-ip_application_security_manager:11.5.4
F5 » Big-Ip Application Security Manager » Version: 11.5.4.1

cpe:2.3:a:f5:big-ip_application_security_manager:11.5.4.1
F5 » Big-Ip Application Security Manager » Version: 11.5.4.2

cpe:2.3:a:f5:big-ip_application_security_manager:11.5.4.2
F5 » Big-Ip Application Security Manager » Version: 11.5.4.2.74.291

cpe:2.3:a:f5:big-ip_application_security_manager:11.5.4.2.74.291
F5 » Big-Ip Application Security Manager » Version: 11.5.4.3

cpe:2.3:a:f5:big-ip_application_security_manager:11.5.4.3
F5 » Big-Ip Application Security Manager » Version: 11.5.4.4

cpe:2.3:a:f5:big-ip_application_security_manager:11.5.4.4
F5 » Big-Ip Application Security Manager » Version: 11.5.5

cpe:2.3:a:f5:big-ip_application_security_manager:11.5.5
F5 » Big-Ip Application Security Manager » Version: 11.6.1

cpe:2.3:a:f5:big-ip_application_security_manager:11.6.1
F5 » Big-Ip Application Security Manager » Version: 11.6.2

cpe:2.3:a:f5:big-ip_application_security_manager:11.6.2
F5 » Big-Ip Application Security Manager » Version: 12.1.1

cpe:2.3:a:f5:big-ip_application_security_manager:12.1.1
F5 » Big-Ip Application Security Manager » Version: 12.1.2

cpe:2.3:a:f5:big-ip_application_security_manager:12.1.2

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2017-6143

Products

Pricing

Contact Us