NetSight
IP …
critical9.3Public exploit code

CVE-2014-2927

The rsync daemon in F5 BIG-IP 11.6 before 11.6.0, 11.5.1 before HF3, 11.5.0 before HF4, 11.4.1 before HF4, 11.4.0 before HF7, 11.3.0 before HF9, and 11.2.1 bef…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

The rsync daemon in F5 BIG-IP 11.6 before 11.6.0, 11.5.1 before HF3, 11.5.0 before HF4, 11.4.1 before HF4, 11.4.0 before HF7, 11.3.0 before HF9, and 11.2.1 before HF11 and Enterprise Manager 3.x before 3.1.1 HF2, when configured in failover mode, does not require authentication, which allows remote attackers to read or write to arbitrary files via a cmi request to the ConfigSync IP address.

Affected products

VendorProductAffected versions
F5Arx
Versions 6.0.0, 6.1.0, 6.1.1, 6.2.0, 6.3.0, 6.4.0
F5Big-Ip Access Policy Manager
Versions 10.1.0, 10.2.0, 10.2.1, 10.2.2, 10.2.3, 10.2.4
F5Big-Ip Advanced Firewall Manager
Versions 11.3.0, 11.4.0, 11.4.1, 11.5.0, 11.5.1, 11.6.0
F5Big-Ip Analytics
Versions 11.0.0, 11.1.0, 11.2.0, 11.2.1, 11.3.0, 11.4.0
F5Big-Ip Application Acceleration Manager
Versions 11.4.0, 11.4.1, 11.5.0, 11.5.1, 11.6.0
F5Big-Ip Application Security Manager
Versions 10.0.0, 10.0.1, 10.1.0, 10.2.0, 10.2.1, 10.2.2
F5Big-Ip Edge Gateway
Versions 10.1.0, 10.2.0, 10.2.1, 10.2.2, 10.2.3, 10.2.4
F5Big-Ip Global Traffic Manager
Versions 10.0.0, 10.0.1, 10.1.0, 10.2.0, 10.2.1, 10.2.2
F5Big-Ip Link Controller
Versions 10.0.0, 10.0.1, 10.1.0, 10.2.0, 10.2.1, 10.2.2
F5Big-Ip Local Traffic Manager
Versions 10.0.0, 10.0.1, 10.1.0, 10.2.0, 10.2.1, 10.2.2
F5Big-Ip Policy Enforcement Manager
Versions 11.3.0, 11.4.0, 11.4.1, 11.5.0, 11.5.1, 11.6.0
F5Big-Ip Protocol Security Module
Versions 10.0.0, 10.0.1, 10.1.0, 10.2.0, 10.2.1, 10.2.2

Weakness classification

CWE-287

References