Back to feed
EUVD-2019-16243 · Published Dec 23, 2019
On versions 15.0.0-15.0.1.1, 14.0.0-14.1.2.2, 13.1.0-13.1.3.1, 12.1.0-12.1.5, and 11.5.2-11.6.5.1, under certain conditions, a multi-bladed BIG-IP Virtual Clustered Multiprocessing (vCMP) may drop broadcast packets when they are rebroadcast to the vCMP guest secondary blades. An attacker can leverage the fragmented broadcast IP packets to perform any type of fragmentation-based attack.
Technologies
F5 Big-Ip Fraud Protection ServiceF5 Big-Ip Advanced Firewall ManagerF5 Big-Ip AnalyticsF5 Big-Ip Policy Enforcement ManagerF5 Big-Ip Application Security ManagerF5 Big-Ip Link ControllerF5 Big-Ip Domain Name SystemF5 Big-Ip Application Acceleration ManagerF5 Big-Ip Local Traffic ManagerF5 Big-Ip Access Policy ManagerF5 Big-Ip Global Traffic Manager
CVSS scores
- v3.17.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - v2.05.0
AV:N/AC:L/Au:N/C:N/I:N/A:P
MITRE ATT&CK
InferredWhere this vulnerability fits in an attack
Initial Access
References
Potentially impacted assets
See if this affects your attack surface
