CVEvulnerability

CVE-2016-5745

9.8 CRITICAL Published 2016-10-05 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2016-10-05
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
9.8 CRITICAL — CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
Weaknesses
CWE-284

Description

F5 BIG-IP LTM systems 11.x before 11.2.1 HF16, 11.3.x, 11.4.x before 11.4.1 HF11, 11.5.0, 11.5.1 before HF11, 11.5.2, 11.5.3, 11.5.4 before HF2, 11.6.0 before HF8, 11.6.1 before HF1, 12.0.0 before HF4, and 12.1.0 before HF2 allow remote attackers to modify or extract system configuration files via vectors involving NAT64.

Affected configurations

• f5 big-ip local traffic manager 11.0.0 • f5 big-ip local traffic manager 11.1.0 • f5 big-ip local traffic manager 11.2.0 • f5 big-ip local traffic manager 11.2.1 • f5 big-ip local traffic manager 11.3.0 • f5 big-ip local traffic manager 11.4.0 • f5 big-ip local traffic manager 11.4.1 • f5 big-ip local traffic manager 11.5.0 • f5 big-ip local traffic manager 11.5.1 • f5 big-ip local traffic manager 11.5.2 • f5 big-ip local traffic manager 11.5.3 • f5 big-ip local traffic manager 11.5.4 • f5 big-ip local traffic manager 11.6.0 • f5 big-ip local traffic manager 11.6.1 • f5 big-ip local traffic manager 12.0.0 • f5 big-ip local traffic manager 12.1.0

Related

Weakness · CWE (1)

  • CWE-284 Improper Access Control weakness

References