CVE-2014-2927

The rsync daemon in F5 BIG-IP 11.6 before 11.6.0, 11.5.1 before HF3, 11.5.0 before HF4, 11.4.1 before HF4, 11.4.0 before HF7, 11.3.0 before HF9, and 11.2.1 before HF11 and Enterprise Manager 3.x before 3.1.1 HF2, when configured in failover mode, does not require authentication, which allows remote attackers to read or write to arbitrary files via a cmi request to the ConfigSync IP address.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
9.3 UNKNOWN
NETWORK
MEDIUM
AV:N/AC:M/Au:N/C:C/I:C/A:C
certccCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 91%
VendorProductVersion
f5arx
6.0.0
f5arx
6.1.0
f5arx
6.1.1
f5arx
6.2.0
f5arx
6.3.0
f5arx
6.4.0
f5big-ip_access_policy_manager
10.1.0
f5big-ip_access_policy_manager
10.2.0
f5big-ip_access_policy_manager
10.2.1
f5big-ip_access_policy_manager
10.2.2
f5big-ip_access_policy_manager
10.2.3
f5big-ip_access_policy_manager
10.2.4
f5big-ip_access_policy_manager
11.0.0
f5big-ip_access_policy_manager
11.1.0
f5big-ip_access_policy_manager
11.2.0
f5big-ip_access_policy_manager
11.2.1
f5big-ip_access_policy_manager
11.3.0
f5big-ip_access_policy_manager
11.4.0
f5big-ip_access_policy_manager
11.4.1
f5big-ip_access_policy_manager
11.5.0
f5big-ip_access_policy_manager
11.5.1
f5big-ip_access_policy_manager
11.6.0
f5big-ip_advanced_firewall_manager
11.3.0
f5big-ip_advanced_firewall_manager
11.4.0
f5big-ip_advanced_firewall_manager
11.4.1
f5big-ip_advanced_firewall_manager
11.5.0
f5big-ip_advanced_firewall_manager
11.5.1
f5big-ip_advanced_firewall_manager
11.6.0
f5big-ip_analytics
11.0.0
f5big-ip_analytics
11.1.0
f5big-ip_analytics
11.2.0
f5big-ip_analytics
11.2.1
f5big-ip_analytics
11.3.0
f5big-ip_analytics
11.4.0
f5big-ip_analytics
11.4.1
f5big-ip_analytics
11.5.0
f5big-ip_analytics
11.5.1
f5big-ip_analytics
11.6.0
f5big-ip_application_acceleration_manager
11.4.0
f5big-ip_application_acceleration_manager
11.4.1
f5big-ip_application_acceleration_manager
11.5.0
f5big-ip_application_acceleration_manager
11.5.1
f5big-ip_application_acceleration_manager
11.6.0
f5big-ip_application_security_manager
10.0.0
f5big-ip_application_security_manager
10.0.1
f5big-ip_application_security_manager
10.1.0
f5big-ip_application_security_manager
10.2.0
f5big-ip_application_security_manager
10.2.1
f5big-ip_application_security_manager
10.2.2
f5big-ip_application_security_manager
10.2.3
f5big-ip_application_security_manager
10.2.4
f5big-ip_application_security_manager
11.0.0
f5big-ip_application_security_manager
11.1.0
f5big-ip_application_security_manager
11.2.0
f5big-ip_application_security_manager
11.2.1
f5big-ip_application_security_manager
11.3.0
f5big-ip_application_security_manager
11.4.0
f5big-ip_application_security_manager
11.4.1
f5big-ip_application_security_manager
11.5.0
f5big-ip_application_security_manager
11.5.1
f5big-ip_application_security_manager
11.6.0
f5big-ip_edge_gateway
10.1.0
f5big-ip_edge_gateway
10.2.0
f5big-ip_edge_gateway
10.2.1
f5big-ip_edge_gateway
10.2.2
f5big-ip_edge_gateway
10.2.3
f5big-ip_edge_gateway
10.2.4
f5big-ip_edge_gateway
11.0.0
f5big-ip_edge_gateway
11.1.0
f5big-ip_edge_gateway
11.2.0
f5big-ip_edge_gateway
11.2.1
f5big-ip_edge_gateway
11.3.0
f5big-ip_global_traffic_manager
10.0.0
f5big-ip_global_traffic_manager
10.0.1
f5big-ip_global_traffic_manager
10.1.0
f5big-ip_global_traffic_manager
10.2.0
f5big-ip_global_traffic_manager
10.2.1
f5big-ip_global_traffic_manager
10.2.2
f5big-ip_global_traffic_manager
10.2.3
f5big-ip_global_traffic_manager
10.2.4
f5big-ip_global_traffic_manager
11.0.0
f5big-ip_global_traffic_manager
11.1.0
f5big-ip_global_traffic_manager
11.2.0
f5big-ip_global_traffic_manager
11.2.1
f5big-ip_global_traffic_manager
11.3.0
f5big-ip_global_traffic_manager
11.4.0
f5big-ip_global_traffic_manager
11.4.1
f5big-ip_global_traffic_manager
11.5.0
f5big-ip_global_traffic_manager
11.5.1
f5big-ip_global_traffic_manager
11.6.0
f5big-ip_link_controller
10.0.0
f5big-ip_link_controller
10.0.1
f5big-ip_link_controller
10.1.0
f5big-ip_link_controller
10.2.0
f5big-ip_link_controller
10.2.1
f5big-ip_link_controller
10.2.2
f5big-ip_link_controller
10.2.3
f5big-ip_link_controller
10.2.4
f5big-ip_link_controller
11.0.0
f5big-ip_link_controller
11.1.0
f5big-ip_link_controller
11.2.0
f5big-ip_link_controller
11.2.1
f5big-ip_link_controller
11.3.0
f5big-ip_link_controller
11.4.0
f5big-ip_link_controller
11.4.1
f5big-ip_link_controller
11.5.0
f5big-ip_link_controller
11.5.1
f5big-ip_link_controller
11.6.0
f5big-ip_local_traffic_manager
10.0.0
f5big-ip_local_traffic_manager
10.0.1
f5big-ip_local_traffic_manager
10.1.0
f5big-ip_local_traffic_manager
10.2.0
f5big-ip_local_traffic_manager
10.2.1
f5big-ip_local_traffic_manager
10.2.2
f5big-ip_local_traffic_manager
10.2.3
f5big-ip_local_traffic_manager
10.2.4
f5big-ip_local_traffic_manager
11.0.0
f5big-ip_local_traffic_manager
11.1.0
f5big-ip_local_traffic_manager
11.2.0
f5big-ip_local_traffic_manager
11.2.1
f5big-ip_local_traffic_manager
11.3.0
f5big-ip_local_traffic_manager
11.4.0
f5big-ip_local_traffic_manager
11.4.1
f5big-ip_local_traffic_manager
11.5.0
f5big-ip_local_traffic_manager
11.5.1
f5big-ip_local_traffic_manager
11.6.0
f5big-ip_policy_enforcement_manager
11.3.0
f5big-ip_policy_enforcement_manager
11.4.0
f5big-ip_policy_enforcement_manager
11.4.1
f5big-ip_policy_enforcement_manager
11.5.0
f5big-ip_policy_enforcement_manager
11.5.1
f5big-ip_policy_enforcement_manager
11.6.0
f5big-ip_protocol_security_module
10.0.0
f5big-ip_protocol_security_module
10.0.1
f5big-ip_protocol_security_module
10.1.0
f5big-ip_protocol_security_module
10.2.0
f5big-ip_protocol_security_module
10.2.1
f5big-ip_protocol_security_module
10.2.2
f5big-ip_protocol_security_module
10.2.3
f5big-ip_protocol_security_module
10.2.4
f5big-ip_protocol_security_module
11.0.0
f5big-ip_protocol_security_module
11.1.0
f5big-ip_protocol_security_module
11.2.0
f5big-ip_protocol_security_module
11.2.1
f5big-ip_protocol_security_module
11.3.0
f5big-ip_protocol_security_module
11.4.0
f5big-ip_protocol_security_module
11.4.1
f5big-ip_wan_optimization_manager
10.0.0
f5big-ip_wan_optimization_manager
10.0.1
f5big-ip_wan_optimization_manager
10.1.0
f5big-ip_wan_optimization_manager
10.2.0
f5big-ip_wan_optimization_manager
10.2.1
f5big-ip_wan_optimization_manager
10.2.2
f5big-ip_wan_optimization_manager
10.2.3
f5big-ip_wan_optimization_manager
10.2.4
f5big-ip_wan_optimization_manager
11.0.0
f5big-ip_wan_optimization_manager
11.1.0
f5big-ip_wan_optimization_manager
11.2.0
f5big-ip_wan_optimization_manager
11.2.1
f5big-ip_wan_optimization_manager
11.3.0
f5big-ip_webaccelerator
10.0.0
f5big-ip_webaccelerator
10.0.1
f5big-ip_webaccelerator
10.1.0
f5big-ip_webaccelerator
10.2.0
f5big-ip_webaccelerator
10.2.1
f5big-ip_webaccelerator
10.2.2
f5big-ip_webaccelerator
10.2.3
f5big-ip_webaccelerator
10.2.4
f5big-ip_webaccelerator
11.0.0
f5big-ip_webaccelerator
11.1.0
f5big-ip_webaccelerator
11.2.0
f5big-ip_webaccelerator
11.2.1
f5big-ip_webaccelerator
11.3.0
f5big-iq_cloud
4.0.0
f5big-iq_cloud
4.1.0
f5big-iq_cloud
4.2.0
f5big-iq_cloud
4.3.0
f5big-iq_device
4.2.0
f5big-iq_device
4.3.0
f5big-iq_security
4.0.0
f5big-iq_security
4.1.0
f5big-iq_security
4.2.0
f5big-iq_security
4.3.0
f5enterprise_manager
2.1.0
f5enterprise_manager
2.2.0
f5enterprise_manager
2.3.0
f5enterprise_manager
3.0.0
f5enterprise_manager
3.1.0
f5enterprise_manager
3.1.1
f5firepass
6.0.0
f5firepass
6.0.1
f5firepass
6.0.2
f5firepass
6.0.3
f5firepass
6.1.0
f5firepass
7.0.0
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://www.exploit-db.com/exploits/34465
http://www.security-assessment.com/files/documents/advisory/F5_Unauthenticated_rsync_access_to_Remote_Root_Code_Execution.pdf
https://support.f5.com/kb/en-us/solutions/public/15000/200/sol15236.html
http://www.exploit-db.com/exploits/34465
http://www.security-assessment.com/files/documents/advisory/F5_Unauthenticated_rsync_access_to_Remote_Root_Code_Execution.pdf
https://support.f5.com/kb/en-us/solutions/public/15000/200/sol15236.html