cbcvebase.
CVE-2019-6685
published 2019-12-23

CVE-2019-6685: On BIG-IP versions 15.0.0-15.0.1.1, 14.1.0-14.1.2.2, 14.0.0-14.0.1, 13.1.0-13.1.3.1, 12.1.0-12.1.5, and 11.5.2-11.6.5.1, users with access to edit iRules are…

PriorityP342high7.8CVSS 3.1
AVLACLPRLUINSUCHIHAH
EPSS
0.36%
28.8th percentile
On BIG-IP versions 15.0.0-15.0.1.1, 14.1.0-14.1.2.2, 14.0.0-14.0.1, 13.1.0-13.1.3.1, 12.1.0-12.1.5, and 11.5.2-11.6.5.1, users with access to edit iRules are able to create iRules which can lead to an elevation of privilege, configuration modification, and arbitrary system command execution.

Affected

97 ranges· showing 25
VendorProductVersion rangeFixed in
f5big-ip——
f5big-ip——
f5big-ip——
f5big-ip——
f5big-ip——
f5big-ip——
f5big-ip_aam——
f5big-ip_access_policy_manager11.5.2 – 11.6.5—
f5big-ip_access_policy_manager12.1.0 – 12.1.5—
f5big-ip_access_policy_manager>= 13.1.0 < 13.1.3.213.1.3.2
f5big-ip_access_policy_manager>= 14.0.0 < 14.0.1.114.0.1.1
f5big-ip_access_policy_manager>= 14.1.0 < 14.1.2.314.1.2.3
f5big-ip_access_policy_manager>= 15.0.0 < 15.1.015.1.0
f5big-ip_advanced_firewall_manager11.5.2 – 11.6.5—
f5big-ip_advanced_firewall_manager12.1.0 – 12.1.5—
f5big-ip_advanced_firewall_manager>= 13.1.0 < 13.1.3.213.1.3.2
f5big-ip_advanced_firewall_manager>= 14.0.0 < 14.0.1.114.0.1.1
f5big-ip_advanced_firewall_manager>= 14.1.0 < 14.1.2.314.1.2.3
f5big-ip_advanced_firewall_manager>= 15.0.0 < 15.1.015.1.0
f5big-ip_afm——
f5big-ip_analytics——
f5big-ip_analytics11.5.2 – 11.6.5—
f5big-ip_analytics12.1.0 – 12.1.5—
f5big-ip_analytics>= 13.1.0 < 13.1.3.213.1.3.2
f5big-ip_analytics>= 14.0.0 < 14.0.1.114.0.1.1

CVSS provenance

nvdv3.17.8HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
nvdv2.04.6MEDIUMAV:L/AC:L/Au:N/C:P/I:P/A:P
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.