F5 BIG-IP Unspecified sérülékenység
Angol cím: F5 BIG-IP Unspecified Vulnerability
Publikálás dátuma: 2026.03.30.
Utolsó módosítás dátuma: 2026.03.30.
Leírás
A termék úgy oszt ki erőforrást vagy erőforrás csoportot, hogy azok méretére vagy számára nem ír elő korlátozásokat, megsértve ezzel a biztonsági házirendet.
Leírás forrása: CWE-770 Leírás utolsó módosítása: 2025.12.11.Elemzés leírás
Eredeti nyelven: F5 BIG-IP AMP contains an unspecified vulnerability that could allow a threat actor to achieve remote code execution.
Elemzés leírás forrása: CVE-2025-53521 Elemzés leírás utolsó módosítása: 2026.03.27.Hatás
CVSS3.1 Súlyosság és Metrika
Base score: 9.8 (Kritikus)
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Impact Score: 5.9
Exploitability Score: 3.9
Attack Vector (AV): Network
Attack Complexity (AC): Low
Privileges Required (PR): None
User Interaction (UI): None
Scope (S): Unchanged
Confidentiality Impact (C): High
Integrity Impact (I): High
Availability Impact (A): High
Sérülékeny szoftverek
Configuration 1
cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:* From (including) 15.1.0 Up to (excluding) 15.1.10.8
cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:* From (including) 15.1.0 Up to (excluding) 15.1.10.8
cpe:2.3:a:f5:big-ip_advanced_web_application_firewall:*:*:*:*:*:*:*:* From (including) 15.1.0 Up to (excluding) 15.1.10.8
cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:* From (including) 15.1.0 Up to (excluding) 15.1.10.8
cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:* From (including) 15.1.0 Up to (excluding) 15.1.10.8
cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:* From (including) 15.1.0 Up to (excluding) 15.1.10.8
cpe:2.3:a:f5:big-ip_application_visibility_and_reporting:*:*:*:*:*:*:*:* From (including) 15.1.0 Up to (excluding) 15.1.10.8
cpe:2.3:a:f5:big-ip_automation_toolchain:*:*:*:*:*:*:*:* From (including) 15.1.0 Up to (excluding) 15.1.10.8
cpe:2.3:a:f5:big-ip_carrier-grade_nat:*:*:*:*:*:*:*:* From (including) 15.1.0 Up to (excluding) 15.1.10.8
cpe:2.3:a:f5:big-ip_container_ingress_services:*:*:*:*:*:*:*:* From (including) 15.1.0 Up to (excluding) 15.1.10.8
cpe:2.3:a:f5:big-ip_ddos_hybrid_defender:*:*:*:*:*:*:*:* From (including) 15.1.0 Up to (excluding) 15.1.10.8
cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:* From (including) 15.1.0 Up to (excluding) 15.1.10.8
cpe:2.3:a:f5:big-ip_edge_gateway:*:*:*:*:*:*:*:* From (including) 15.1.0 Up to (excluding) 15.1.10.8
cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:* From (including) 15.1.0 Up to (excluding) 15.1.10.8
cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:* From (including) 15.1.0 Up to (excluding) 15.1.10.8
cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:* From (including) 15.1.0 Up to (excluding) 15.1.10.8
cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:* From (including)15.1.0 Up to (excluding)15.1.10.8
cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:* From (including) 15.1.0 Up to (excluding)15.1.10.8
cpe:2.3:a:f5:big-ip_ssl_orchestrator:*:*:*:*:*:*:*:* From (including) 15.1.0 Up to (excluding)15.1.10.8
cpe:2.3:a:f5:big-ip_webaccelerator:*:*:*:*:*:*:*:* From (including) 15.1.0 Up to (excluding) 15.1.10.8
cpe:2.3:a:f5:big-ip_websafe:*:*:*:*:*:*:*:*From (including) 15.1.0 Up to (excluding) 15.1.10.8
Configuration 2
cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*
From (including)
16.1.0 Up to (excluding)
16.1.6.1
cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*
From (including)
16.1.0 Up to (excluding)
16.1.6.1
cpe:2.3:a:f5:big-ip_advanced_web_application_firewall:*:*:*:*:*:*:*:*
From (including)
16.1.0 Up to (excluding)
16.1.6.1
cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*
From (including)
16.1.0 Up to (excluding)
16.1.6.1
cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*
From (including)
16.1.0 Up to (excluding)
16.1.6.1
cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*
From (including)
16.1.0 Up to (excluding)
16.1.6.1
cpe:2.3:a:f5:big-ip_application_visibility_and_reporting:*:*:*:*:*:*:*:*
From (including)
16.1.0 Up to (excluding)
16.1.6.1
cpe:2.3:a:f5:big-ip_automation_toolchain:*:*:*:*:*:*:*:*
From (including)
16.1.0 Up to (excluding)
16.1.6.1
cpe:2.3:a:f5:big-ip_carrier-grade_nat:*:*:*:*:*:*:*:*
From (including)
16.1.0 Up to (excluding)
16.1.6.1
cpe:2.3:a:f5:big-ip_container_ingress_services:*:*:*:*:*:*:*:*
From (including)
16.1.0 Up to (excluding)
16.1.6.1
cpe:2.3:a:f5:big-ip_ddos_hybrid_defender:*:*:*:*:*:*:*:*
From (including)
16.1.0 Up to (excluding)
16.1.6.1
cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*
From (including)
16.1.0 Up to (excluding)
16.1.6.1
cpe:2.3:a:f5:big-ip_edge_gateway:*:*:*:*:*:*:*:*
From (including)
16.1.0 Up to (excluding)
16.1.6.1
cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:*
From (including)
16.1.0 Up to (excluding)
16.1.6.1
cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:*
From (including)
16.1.0 Up to (excluding)
16.1.6.1
cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*
From (including)
16.1.0 Up to (excluding)
16.1.6.1
cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*
From (including)
16.1.0 Up to (excluding)
16.1.6.1
cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*
From (including)
16.1.0 Up to (excluding)
16.1.6.1
cpe:2.3:a:f5:big-ip_ssl_orchestrator:*:*:*:*:*:*:*:*
From (including)
16.1.0 Up to (excluding)
16.1.6.1
cpe:2.3:a:f5:big-ip_webaccelerator:*:*:*:*:*:*:*:*
From (including)
16.1.0 Up to (excluding)
16.1.6.1
cpe:2.3:a:f5:big-ip_websafe:*:*:*:*:*:*:*:*
From (including)
16.1.0 Up to (excluding)
16.1.6.1
Configuration 3
cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*
From (including)
17.1.0 Up to (excluding)
17.1.3
cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*
From (including)
17.5.0 Up to (including)
17.5.1
cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*
From (including)
17.1.0 Up to (excluding)
17.1.3
cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*
From (including)
17.5.0 Up to (including)
17.5.1
cpe:2.3:a:f5:big-ip_advanced_web_application_firewall:*:*:*:*:*:*:*:*
From (including)
17.1.0 Up to (excluding)
17.1.3
cpe:2.3:a:f5:big-ip_advanced_web_application_firewall:*:*:*:*:*:*:*:*
From (including)
17.5.0 Up to (including)
17.5.1
cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*
From (including)
17.1.0 Up to (excluding)
17.1.3
cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*
From (including)
17.5.0 Up to (including)
17.5.1
cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*
From (including)
17.1.0 Up to (excluding)
17.1.3
cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*
From (including)
17.5.0 Up to (including)
17.5.1
cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*
From (including)
17.1.0 Up to (excluding)
17.1.3
cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*
From (including)
17.5.0 Up to (including)
17.5.1
cpe:2.3:a:f5:big-ip_application_visibility_and_reporting:*:*:*:*:*:*:*:*
From (including)
17.1.0 Up to (excluding)
17.1.3
cpe:2.3:a:f5:big-ip_application_visibility_and_reporting:*:*:*:*:*:*:*:*
From (including)
17.5.0 Up to (including)
17.5.1
cpe:2.3:a:f5:big-ip_automation_toolchain:*:*:*:*:*:*:*:*
From (including)
17.1.0 Up to (excluding)
17.1.3
cpe:2.3:a:f5:big-ip_automation_toolchain:*:*:*:*:*:*:*:*
From (including)
17.5.0 Up to (including)
17.5.1
cpe:2.3:a:f5:big-ip_carrier-grade_nat:*:*:*:*:*:*:*:*
From (including)
17.1.0 Up to (excluding)
17.1.3
cpe:2.3:a:f5:big-ip_carrier-grade_nat:*:*:*:*:*:*:*:*
From (including)
17.5.0 Up to (including)
17.5.1
cpe:2.3:a:f5:big-ip_container_ingress_services:*:*:*:*:*:*:*:*
From (including)
17.1.0 Up to (excluding)
17.1.3
cpe:2.3:a:f5:big-ip_container_ingress_services:*:*:*:*:*:*:*:*
From (including)
17.5.0 Up to (including)
17.5.1
cpe:2.3:a:f5:big-ip_ddos_hybrid_defender:*:*:*:*:*:*:*:*
From (including)
17.1.0 Up to (excluding)
17.1.3
cpe:2.3:a:f5:big-ip_ddos_hybrid_defender:*:*:*:*:*:*:*:*
From (including)
17.5.0 Up to (including)
17.5.1
cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*
From (including)
17.1.0 Up to (excluding)
17.1.3
cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*
From (including)
17.5.0 Up to (including)
17.5.1
cpe:2.3:a:f5:big-ip_edge_gateway:*:*:*:*:*:*:*:*
From (including)
17.1.0 Up to (excluding)
17.1.3
cpe:2.3:a:f5:big-ip_edge_gateway:*:*:*:*:*:*:*:*
From (including)
17.5.0 Up to (including)
17.5.1
cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:*
From (including)
17.1.0 Up to (excluding)
17.1.3
cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:*
From (including)
17.5.0 Up to (including)
17.5.1
cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:*
From (including)
17.1.0 Up to (excluding)
17.1.3
From (including)
17.1.0 Up to (excluding)
17.1.3
cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*
From (including)
17.5.0 Up to (including)
17.5.1
cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*
From (including)
17.1.0 Up to (excluding)
17.1.3
cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*
From (including)
17.5.0 Up to (including)
17.5.1
cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*
From (including)
17.1.0 Up to (excluding)
17.1.3
cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*
From (including)
17.5.0 Up to (including)
17.5.1
cpe:2.3:a:f5:big-ip_ssl_orchestrator:*:*:*:*:*:*:*:*
From (including)
17.1.0 Up to (excluding)
17.1.3
cpe:2.3:a:f5:big-ip_ssl_orchestrator:*:*:*:*:*:*:*:*
From (including)
17.5.0 Up to (including)
17.5.1
cpe:2.3:a:f5:big-ip_webaccelerator:*:*:*:*:*:*:*:*
From (including)
17.1.0 Up to (excluding)
17.1.3
cpe:2.3:a:f5:big-ip_webaccelerator:*:*:*:*:*:*:*:*
From (including)
17.5.0 Up to (including)
17.5.1
cpe:2.3:a:f5:big-ip_websafe:*:*:*:*:*:*:*:*
From (including)
17.1.0 Up to (excluding)
17.1.3
cpe:2.3:a:f5:big-ip_websafe:*:*:*:*:*:*:*:*
From (including)
17.5.0 Up to (including)
17.5.1