CVE-2019-6627 — Race Condition in F5 SSL Orchestrator

CWE-362 — Race Condition5 documents5 sources
Severity
5.9MEDIUMNVD
EPSS
0.5%
top 33.96%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
F5 SSL OrchestratorF5 SSL Orchestrator
Timeline
PublishedJul 3
Latest updateMay 25

Description

On F5 SSL Orchestrator 14.1.0-14.1.0.5, on rare occasions, specific to a certain race condition, TMM may restart when SSL Forward Proxy enforces the bypass action for an SSL Orchestrator transparent virtual server with SNAT enabled.

CVSS vector

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:HExploitability: 2.2 | Impact: 3.6

Affected Packages2 packages

▶NVDf5/ssl_orchestrator14.1.0 — 14.1.0.6
▶CVEListV5f5/f5_ssl_orchestratorF5 SSL Orchestrator 14.1.0-14.1.0.5

🔴Vulnerability Details

2
GHSA
GHSA-xmxc-mvx2-q963: On F5 SSL Orchestrator 14↗2022-05-24
▶
CVEList
CVE-2019-6627: On F5 SSL Orchestrator 14↗2019-07-03
▶

💥Exploits & PoCs

1
Exploit-DB
Seagate Central Storage 2015.0916 - Unauthenticated Remote Command Execution (Metasploit)↗2023-05-25
▶

📋Vendor Advisories

1
F5
CVE-2019-6627: On F5 SSL Orchestrator 14↗2019-07-03
▶
CVE-2019-6627 — Race Condition in F5 SSL Orchestrator | cvebase