Vulnerability   
Search   
    Search 324607 CVE descriptions
and 145615 test descriptions,
access 10,000+ cross references.
Tests   CVE   All  

Test ID:1.3.6.1.4.1.25623.1.0.103494
Category:Gain a shell remotely
Title:Multiple F5 Networks Products - SSH vulnerability CVE-2012-1493
Summary:Multiple F5 Networks products are prone to an SSH vulnerability.
Description:Summary:
Multiple F5 Networks products are prone to an SSH vulnerability.

Vulnerability Insight:
A platform-specific remote root access vulnerability has been
discovered that may allow a remote user to gain privileged access to affected systems using SSH

The vulnerability is caused by a publicly known SSH private key for the root user which is present
on all vulnerable appliances.

Affected Software/OS:
The following platforms are affected by this issue:

VIPRION B2100, B4100, and B4200

BIG-IP 520, 540, 1000, 2000, 2400, 5000, 5100, 1600, 3600, 3900, 6900, 8900, 8950, 11000, and 11050

BIG-IP Virtual Edition

Enterprise Manager 3000 and 4000

Solution:
Updates are available. See the References for more information.

CVSS Score:
7.8

CVSS Vector:
AV:N/AC:L/Au:N/C:C/I:N/A:N

Cross-Ref: Common Vulnerability Exposure (CVE) ID: CVE-2012-1493
http://www.theregister.co.uk/2012/06/13/f5_kit_metasploit_exploit/
https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/ssh/f5_bigip_known_privkey.rb
https://www.trustmatta.com/advisories/MATTA-2012-002.txt
CopyrightCopyright (C) 2012 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit.

To run a free test of this vulnerability against your system, register below.




© 1998-2025 E-Soft Inc. All rights reserved.