CVE-2023-3470

02.08.2023, 16:15

Specific F5 BIG-IP platforms with Cavium Nitrox FIPS HSM cards generate a deterministic password for the Crypto User account. The predictable nature of the password allows an authenticated user with TMSH access to the BIG-IP system, or anyone with physical access to the FIPS HSM, the information required to generate the correct password. On vCMP systems, all Guests share the same deterministic password, allowing those with TMSH access on one Guest to access keys of a different Guest.

The following BIG-IP hardware platforms are affected: 10350v-F, i5820-DF, i7820-DF, i15820-DF, 5250v-F, 7200v-F, 10200v-F, 6900-F, 8900-F, 11000-F, and 11050-F.

The BIG-IP rSeries r5920-DF and r10920-DF are not affected, nor does the issue affect software FIPS implementations or network HSM configurations.

Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	NIST	6 MEDIUM	LOCAL	LOW	HIGH	CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N
f5	CNA	6 MEDIUM	LOCAL	LOW	HIGH	CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N
CVE	ADP	---				---
CISA-ADP	ADP	---				---

Base Score

CVSS 3.x

EPSS Score

Percentile: 22%

Vendor	Product	Version
f5	big-ip_access_policy_manager	13.1.0 ≤ 𝑥 < 13.1.4
f5	big-ip_access_policy_manager	14.1.0 ≤ 𝑥 < 14.1.4
f5	big-ip_access_policy_manager	15.1.0
f5	big-ip_advanced_firewall_manager	13.1.0 ≤ 𝑥 < 13.1.4
f5	big-ip_advanced_firewall_manager	14.1.0 ≤ 𝑥 < 14.1.4
f5	big-ip_advanced_firewall_manager	15.1.0
f5	big-ip_advanced_web_application_firewall	13.1.0 ≤ 𝑥 < 13.1.4
f5	big-ip_advanced_web_application_firewall	14.1.0 ≤ 𝑥 < 14.1.4
f5	big-ip_advanced_web_application_firewall	15.1.0
f5	big-ip_analytics	13.1.0 ≤ 𝑥 < 13.1.4
f5	big-ip_analytics	14.1.0 ≤ 𝑥 < 14.1.4
f5	big-ip_analytics	15.1.0
f5	big-ip_application_acceleration_manager	13.1.0 ≤ 𝑥 < 13.1.4
f5	big-ip_application_acceleration_manager	14.1.0 ≤ 𝑥 < 14.1.4
f5	big-ip_application_acceleration_manager	15.1.0
f5	big-ip_application_security_manager	13.1.0 ≤ 𝑥 < 13.1.4
f5	big-ip_application_security_manager	14.1.0 ≤ 𝑥 < 14.1.4
f5	big-ip_application_security_manager	15.1.0
f5	big-ip_application_visibility_and_reporting	13.1.0 ≤ 𝑥 < 13.1.4
f5	big-ip_application_visibility_and_reporting	14.1.0 ≤ 𝑥 < 14.1.4
f5	big-ip_application_visibility_and_reporting	15.1.0
f5	big-ip_carrier-grade_nat	13.1.0 ≤ 𝑥 < 13.1.4
f5	big-ip_carrier-grade_nat	14.1.0 ≤ 𝑥 < 14.1.4
f5	big-ip_carrier-grade_nat	15.1.0
f5	big-ip_ddos_hybrid_defender	13.1.0 ≤ 𝑥 < 13.1.4
f5	big-ip_ddos_hybrid_defender	14.1.0 ≤ 𝑥 < 14.1.4
f5	big-ip_ddos_hybrid_defender	15.1.0
f5	big-ip_domain_name_system	13.1.0 ≤ 𝑥 < 13.1.4
f5	big-ip_domain_name_system	14.1.0 ≤ 𝑥 < 14.1.4
f5	big-ip_domain_name_system	15.1.0
f5	big-ip_edge_gateway	13.1.0 ≤ 𝑥 < 13.1.4
f5	big-ip_edge_gateway	14.1.0 ≤ 𝑥 < 14.1.4
f5	big-ip_edge_gateway	15.1.0
f5	big-ip_fraud_protection_service	13.1.0 ≤ 𝑥 < 13.1.4
f5	big-ip_fraud_protection_service	14.1.0 ≤ 𝑥 < 14.1.4
f5	big-ip_fraud_protection_service	15.1.0
f5	big-ip_global_traffic_manager	13.1.0 ≤ 𝑥 < 13.1.4
f5	big-ip_global_traffic_manager	14.1.0 ≤ 𝑥 < 14.1.4
f5	big-ip_global_traffic_manager	15.1.0
f5	big-ip_link_controller	13.1.0 ≤ 𝑥 < 13.1.4
f5	big-ip_link_controller	14.1.0 ≤ 𝑥 < 14.1.4
f5	big-ip_link_controller	15.1.0
f5	big-ip_local_traffic_manager	13.1.0 ≤ 𝑥 < 13.1.4
f5	big-ip_local_traffic_manager	14.1.0 ≤ 𝑥 < 14.1.4
f5	big-ip_local_traffic_manager	15.1.0
f5	big-ip_policy_enforcement_manager	13.1.0 ≤ 𝑥 < 13.1.4
f5	big-ip_policy_enforcement_manager	14.1.0 ≤ 𝑥 < 14.1.4
f5	big-ip_policy_enforcement_manager	15.1.0
f5	big-ip_ssl_orchestrator	13.1.0 ≤ 𝑥 < 13.1.4
f5	big-ip_ssl_orchestrator	14.1.0 ≤ 𝑥 < 14.1.4
f5	big-ip_ssl_orchestrator	15.1.0
f5	big-ip_webaccelerator	13.1.0 ≤ 𝑥 < 13.1.4
f5	big-ip_webaccelerator	14.1.0 ≤ 𝑥 < 14.1.4
f5	big-ip_webaccelerator	15.1.0
f5	big-ip_websafe	13.1.0 ≤ 𝑥 < 13.1.4
f5	big-ip_websafe	14.1.0 ≤ 𝑥 < 14.1.4
f5	big-ip_websafe	15.1.0
f5	big-ip_10350v-f_firmware	-
f5	big-ip_i5820-df_firmware	-
f5	big-ip_i7820-df_firmware	-
f5	big-ip_i15820-df_firmware	-
f5	big-ip_5250v-f_firmware	-
f5	big-ip_7200v-f_firmware	-
f5	big-ip_10200v-f_firmware	-
f5	big-ip_6900-f_firmware	-
f5	big-ip_8900-f_firmware	-
f5	big-ip_11000-f_firmware	-
f5	big-ip_11050-f_firmware	-

𝑥

= Vulnerable software versions

Common Weakness Enumeration

References

https://my.f5.com/manage/s/article/K000135449