csirt@kutim:~/threat-intel/cve/CVE-2021-23000

Katalog CVE

CVSS 7.5 · High EPSS 0,93%

Kerentanan pada f5 big-ip access policy manager, f5 big-ip advanced firewall manager +12 lainnya. Skor CVSS 3.1 7.5 (High) menurut NVD.

Deskripsi (NVD)

On BIG-IP versions 13.1.3.4-13.1.3.6 and 12.1.5.2, if the tmm.http.rfc.enforcement BigDB key is enabled in a BIG-IP system, or the Bad host header value is checked in the AFM HTTP security profile associated with a virtual server, in rare instances, a specific sequence of malicious requests may cause TMM to restart. Note: Software versions which have reached End of Software Development (EoSD) are not evaluated.

Rincian

Terbit di NVD
31 Maret 2021
Terakhir diubah
17 Juni 2026
Status NVD
Modified
CVSS 3.1
7.5 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator
EPSS (30 hari)
0,93% peluang dieksploitasi; lebih tinggi dari 59,7% CVE lain

Produk dan versi terdampak

VendorProdukVersi terdampak
f5 big-ip access policy manager Versi 13.1.3.4 hingga sebelum 13.1.3.6
f5 big-ip access policy manager Versi 12.1.5.2
f5 big-ip advanced firewall manager Versi 13.1.3.4 hingga sebelum 13.1.3.6
f5 big-ip advanced firewall manager Versi 12.1.5.2
f5 big-ip advanced web application firewall Versi 13.1.3.4 hingga sebelum 13.1.3.6
f5 big-ip advanced web application firewall Versi 12.1.5.2
f5 big-ip analytics Versi 13.1.3.4 hingga sebelum 13.1.3.6
f5 big-ip analytics Versi 12.1.5.2
f5 big-ip application acceleration manager Versi 13.1.3.4 hingga sebelum 13.1.3.6
f5 big-ip application acceleration manager Versi 12.1.5.2
f5 big-ip application security manager Versi 13.1.3.4 hingga sebelum 13.1.3.6
f5 big-ip application security manager Versi 12.1.5.2
f5 big-ip ddos hybrid defender Versi 13.1.3.4 hingga sebelum 13.1.3.6
f5 big-ip ddos hybrid defender Versi 12.1.5.2
f5 big-ip domain name system Versi 13.1.3.4 hingga sebelum 13.1.3.6
f5 big-ip domain name system Versi 12.1.5.2
f5 big-ip fraud protection service Versi 13.1.3.4 hingga sebelum 13.1.3.6
f5 big-ip fraud protection service Versi 12.1.5.2
f5 big-ip global traffic manager Versi 13.1.3.4 hingga sebelum 13.1.3.6
f5 big-ip global traffic manager Versi 12.1.5.2
f5 big-ip link controller Versi 13.1.3.4 hingga sebelum 13.1.3.6
f5 big-ip link controller Versi 12.1.5.2
f5 big-ip local traffic manager Versi 13.1.3.4 hingga sebelum 13.1.3.6
f5 big-ip local traffic manager Versi 12.1.5.2
f5 big-ip policy enforcement manager Versi 13.1.3.4 hingga sebelum 13.1.3.6
f5 big-ip policy enforcement manager Versi 12.1.5.2
f5 ssl orchestrator Versi 13.1.3.4 hingga sebelum 13.1.3.6
f5 ssl orchestrator Versi 12.1.5.2

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:10 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.