CVE-2017-6156
MEDIUMF5 BIG-IP 11.5.1-11.5.5, 11.6.0-11.6.1, 12.1.0-12.1.1 - IPSec Tunnel Disruption and Impersonation
Title source: llmDescription
When the F5 BIG-IP 12.1.0-12.1.1, 11.6.0-11.6.1, 11.5.1-11.5.5, or 11.2.1 system is configured with a wildcard IPSec tunnel endpoint, it may allow a remote attacker to disrupt or impersonate the tunnels that have completed phase 1 IPSec negotiations. The attacker must possess the necessary credentials to negotiate the phase 1 of the IPSec exchange to exploit this vulnerability; in many environment this limits the attack surface to other endpoints under the same administration.
References (1)
Core 1
Core References
Vendor Advisory x_refsource_confirm
https://support.f5.com/csp/article/K05263202
Scores
CVSS v3
6.4
EPSS
0.0039
EPSS Percentile
60.5%
Attack Vector
NETWORK
CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H
Details
Status
published
Products (39)
f5/big-ip_access_policy_manager
11.2.1
f5/big-ip_access_policy_manager
11.6.1
f5/big-ip_access_policy_manager
11.5.1 - 11.5.5
f5/big-ip_advanced_firewall_manager
11.2.1
f5/big-ip_advanced_firewall_manager
11.6.1
f5/big-ip_advanced_firewall_manager
11.5.1 - 11.5.5
f5/big-ip_analytics
11.2.1
f5/big-ip_analytics
11.6.1
f5/big-ip_analytics
11.5.1 - 11.5.5
f5/big-ip_application_acceleration_manager
11.2.1
... and 29 more
Published
Apr 13, 2018
Tracked Since
Feb 18, 2026