CVE-2017-0305

published 2017-04-06

CVE-2017-0305: F5 SSL Intercept iApp version 1.5.0 - 1.5.7 is vulnerable to an unauthenticated, remote attack that may allow modification of the BIG-IP system configuration…

Priority P2 60 critical 9.8 CVSS 3.0

AV N AC L PR N UI N S U C H I H A H

F5 SSL Intercept iApp version 1.5.0 - 1.5.7 is vulnerable to an unauthenticated, remote attack that may allow modification of the BIG-IP system configuration, extraction of sensitive system files, and possible remote command execution on the system when deployed using the Explicit Proxy feature plus SNAT Auto Map option for egress traffic.

Affected

4 ranges

Vendor	Product	Version range	Fixed in
f5	ssl_intercept_iapp	—	—
f5	ssl_intercept_iapp	—	—
f5	ssl_intercept_iapp	—	—
f5_networks	ssl_intercept_iapp_version	—	—

Detection & IOCs extracted from sources · hover to see the quote

• · Vulnerability is only exploitable when the F5 SSL Intercept iApp is deployed with BOTH the Explicit Proxy feature AND the SNAT Auto Map option for egress traffic enabled simultaneously. ↗
• · Affected versions are F5 SSL Intercept iApp 1.5.0 through 1.5.7 only; deployments outside this version range are not affected. ↗

CVSS provenance

nvd v3.0 9.8 CRITICAL CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

nvd v2.0 7.5 HIGH AV:N/AC:L/Au:N/C:P/I:P/A:P

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.