CVE-2016-9250 In F5 BIG-IP 11.2.1, 11.4.0 through 11.6.1, and 12.0.0 through 12.1.2, an unauthenticated user with access to the control plane may be able to delete arbitrary files through an undisclosed mechanism.
HighCVSS 7.5
EPSS 0.90%
- Published
- Updated
- Exploit status
- No public exploit known
Description
In F5 BIG-IP 11.2.1, 11.4.0 through 11.6.1, and 12.0.0 through 12.1.2, an unauthenticated user with access to the control plane may be able to delete arbitrary files through an undisclosed mechanism.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| f5 big-ip local traffic manager | = 11.2.1 | No fix listed |
| f5 big-ip local traffic manager | = 11.4.0 | No fix listed |
| f5 big-ip local traffic manager | = 11.4.1 | No fix listed |
| f5 big-ip local traffic manager | = 11.5.0 | No fix listed |
| f5 big-ip local traffic manager | = 11.5.1 | No fix listed |
| f5 big-ip local traffic manager | = 11.5.2 | No fix listed |
| f5 big-ip local traffic manager | = 11.5.3 | No fix listed |
| f5 big-ip local traffic manager | = 11.5.4 | No fix listed |
| f5 big-ip local traffic manager | = 11.6.0 | No fix listed |
| f5 big-ip local traffic manager | = 11.6.1 | No fix listed |
| f5 big-ip local traffic manager | = 12.0.0 | No fix listed |
| f5 big-ip local traffic manager | = 12.1.0 | No fix listed |
| f5 big-ip local traffic manager | = 12.1.1 | No fix listed |
| f5 big-ip local traffic manager | = 12.1.2 | No fix listed |
| f5 big-ip application acceleration manager | = 11.4.0 | No fix listed |
| f5 big-ip application acceleration manager | = 11.4.1 | No fix listed |
| f5 big-ip application acceleration manager | = 11.5.0 | No fix listed |
| f5 big-ip application acceleration manager | = 11.5.1 | No fix listed |
| f5 big-ip application acceleration manager | = 11.5.2 | No fix listed |
| f5 big-ip application acceleration manager | = 11.5.3 | No fix listed |
| f5 big-ip application acceleration manager | = 11.5.4 | No fix listed |
| f5 big-ip application acceleration manager | = 11.6.0 | No fix listed |
| f5 big-ip application acceleration manager | = 11.6.1 | No fix listed |
| f5 big-ip application acceleration manager | = 12.0.0 | No fix listed |
| f5 big-ip application acceleration manager | = 12.1.0 | No fix listed |
Show 112 more
| Product | Affected versions | Fixed in |
|---|---|---|
| f5 big-ip application acceleration manager | = 12.1.1 | No fix listed |
| f5 big-ip application acceleration manager | = 12.1.2 | No fix listed |
| f5 big-ip advanced firewall manager | = 11.2.1 | No fix listed |
| f5 big-ip advanced firewall manager | = 11.4.0 | No fix listed |
| f5 big-ip advanced firewall manager | = 11.4.1 | No fix listed |
| f5 big-ip advanced firewall manager | = 11.5.0 | No fix listed |
| f5 big-ip advanced firewall manager | = 11.5.1 | No fix listed |
| f5 big-ip advanced firewall manager | = 11.5.2 | No fix listed |
| f5 big-ip advanced firewall manager | = 11.5.3 | No fix listed |
| f5 big-ip advanced firewall manager | = 11.5.4 | No fix listed |
| f5 big-ip advanced firewall manager | = 11.6.0 | No fix listed |
| f5 big-ip advanced firewall manager | = 11.6.1 | No fix listed |
| f5 big-ip advanced firewall manager | = 12.0.0 | No fix listed |
| f5 big-ip advanced firewall manager | = 12.1.0 | No fix listed |
| f5 big-ip advanced firewall manager | = 12.1.1 | No fix listed |
| f5 big-ip advanced firewall manager | = 12.1.2 | No fix listed |
| f5 big-ip analytics | = 11.2.1 | No fix listed |
| f5 big-ip analytics | = 11.4.0 | No fix listed |
| f5 big-ip analytics | = 11.4.1 | No fix listed |
| f5 big-ip analytics | = 11.5.0 | No fix listed |
| f5 big-ip analytics | = 11.5.1 | No fix listed |
| f5 big-ip analytics | = 11.5.2 | No fix listed |
| f5 big-ip analytics | = 11.5.3 | No fix listed |
| f5 big-ip analytics | = 11.5.4 | No fix listed |
| f5 big-ip analytics | = 11.6.0 | No fix listed |
| f5 big-ip analytics | = 11.6.1 | No fix listed |
| f5 big-ip analytics | = 12.0.0 | No fix listed |
| f5 big-ip analytics | = 12.1.0 | No fix listed |
| f5 big-ip analytics | = 12.1.1 | No fix listed |
| f5 big-ip analytics | = 12.1.2 | No fix listed |
| f5 big-ip access policy manager | = 11.2.1 | No fix listed |
| f5 big-ip access policy manager | = 11.4.0 | No fix listed |
| f5 big-ip access policy manager | = 11.4.1 | No fix listed |
| f5 big-ip access policy manager | = 11.5.0 | No fix listed |
| f5 big-ip access policy manager | = 11.5.1 | No fix listed |
| f5 big-ip access policy manager | = 11.5.2 | No fix listed |
| f5 big-ip access policy manager | = 11.5.3 | No fix listed |
| f5 big-ip access policy manager | = 11.5.4 | No fix listed |
| f5 big-ip access policy manager | = 11.6.0 | No fix listed |
| f5 big-ip access policy manager | = 11.6.1 | No fix listed |
| f5 big-ip access policy manager | = 12.0.0 | No fix listed |
| f5 big-ip access policy manager | = 12.1.0 | No fix listed |
| f5 big-ip access policy manager | = 12.1.1 | No fix listed |
| f5 big-ip access policy manager | = 12.1.2 | No fix listed |
| f5 big-ip application security manager | = 11.2.1 | No fix listed |
| f5 big-ip application security manager | = 11.4.0 | No fix listed |
| f5 big-ip application security manager | = 11.4.1 | No fix listed |
| f5 big-ip application security manager | = 11.5.0 | No fix listed |
| f5 big-ip application security manager | = 11.5.1 | No fix listed |
| f5 big-ip application security manager | = 11.5.2 | No fix listed |
| f5 big-ip application security manager | = 11.5.3 | No fix listed |
| f5 big-ip application security manager | = 11.5.4 | No fix listed |
| f5 big-ip application security manager | = 11.6.0 | No fix listed |
| f5 big-ip application security manager | = 11.6.1 | No fix listed |
| f5 big-ip application security manager | = 12.0.0 | No fix listed |
| f5 big-ip application security manager | = 12.1.0 | No fix listed |
| f5 big-ip application security manager | = 12.1.1 | No fix listed |
| f5 big-ip application security manager | = 12.1.2 | No fix listed |
| f5 big-ip domain name system | = 12.0.0 | No fix listed |
| f5 big-ip domain name system | = 12.1.0 | No fix listed |
| f5 big-ip domain name system | = 12.1.1 | No fix listed |
| f5 big-ip domain name system | = 12.1.2 | No fix listed |
| f5 big-ip edge gateway | = 11.2.1 | No fix listed |
| f5 big-ip global traffic manager | = 11.2.1 | No fix listed |
| f5 big-ip global traffic manager | = 11.4.0 | No fix listed |
| f5 big-ip global traffic manager | = 11.4.1 | No fix listed |
| f5 big-ip global traffic manager | = 11.5.0 | No fix listed |
| f5 big-ip global traffic manager | = 11.5.1 | No fix listed |
| f5 big-ip global traffic manager | = 11.5.2 | No fix listed |
| f5 big-ip global traffic manager | = 11.5.3 | No fix listed |
| f5 big-ip global traffic manager | = 11.5.4 | No fix listed |
| f5 big-ip global traffic manager | = 11.6.0 | No fix listed |
| f5 big-ip global traffic manager | = 11.6.1 | No fix listed |
| f5 big-ip link controller | = 11.2.1 | No fix listed |
| f5 big-ip link controller | = 11.4.0 | No fix listed |
| f5 big-ip link controller | = 11.4.1 | No fix listed |
| f5 big-ip link controller | = 11.5.0 | No fix listed |
| f5 big-ip link controller | = 11.5.1 | No fix listed |
| f5 big-ip link controller | = 11.5.2 | No fix listed |
| f5 big-ip link controller | = 11.5.3 | No fix listed |
| f5 big-ip link controller | = 11.5.4 | No fix listed |
| f5 big-ip link controller | = 11.6.0 | No fix listed |
| f5 big-ip link controller | = 11.6.1 | No fix listed |
| f5 big-ip link controller | = 12.0.0 | No fix listed |
| f5 big-ip link controller | = 12.1.0 | No fix listed |
| f5 big-ip link controller | = 12.1.1 | No fix listed |
| f5 big-ip link controller | = 12.1.2 | No fix listed |
| f5 big-ip policy enforcement manager | = 11.4.0 | No fix listed |
| f5 big-ip policy enforcement manager | = 11.4.1 | No fix listed |
| f5 big-ip policy enforcement manager | = 11.5.0 | No fix listed |
| f5 big-ip policy enforcement manager | = 11.5.1 | No fix listed |
| f5 big-ip policy enforcement manager | = 11.5.2 | No fix listed |
| f5 big-ip policy enforcement manager | = 11.5.3 | No fix listed |
| f5 big-ip policy enforcement manager | = 11.5.4 | No fix listed |
| f5 big-ip policy enforcement manager | = 11.6.0 | No fix listed |
| f5 big-ip policy enforcement manager | = 11.6.1 | No fix listed |
| f5 big-ip policy enforcement manager | = 12.0.0 | No fix listed |
| f5 big-ip policy enforcement manager | = 12.1.0 | No fix listed |
| f5 big-ip policy enforcement manager | = 12.1.1 | No fix listed |
| f5 big-ip policy enforcement manager | = 12.1.2 | No fix listed |
| f5 big-ip protocol security module | = 11.4.0 | No fix listed |
| f5 big-ip protocol security module | = 11.4.1 | No fix listed |
| f5 big-ip webaccelerator | = 11.2.1 | No fix listed |
| f5 big-ip websafe | = 11.6.0 | No fix listed |
| f5 big-ip websafe | = 11.6.1 | No fix listed |
| f5 big-ip websafe | = 12.0.0 | No fix listed |
| f5 big-ip websafe | = 12.1.0 | No fix listed |
| f5 big-ip websafe | = 12.1.1 | No fix listed |
| f5 big-ip websafe | = 12.1.2 | No fix listed |
| f5 BIG-IP | = 11.2.1 | No fix listed |
| f5 BIG-IP | = 11.4.0-11.6.1 | No fix listed |
| f5 BIG-IP | = 12.0.0-12.1.2 | No fix listed |
References
- support.f5.com vendor-advisory