![]() |
Home ▼ Bookkeeping
Online ▼ Security
Audits ▼
Managed
DNS ▼
About
Order
FAQ
Acceptable Use Policy
Dynamic DNS Clients
Configure Domains Dyanmic DNS Update Password Network
Monitor ▼
Enterprise Package
Advanced Package
Standard Package
Free Trial
FAQ
Price/Feature Summary
Order/Renew
Examples
Configure/Status Alert Profiles | ||
Test ID: | 1.3.6.1.4.1.25623.1.0.103494 |
Category: | Gain a shell remotely |
Title: | Multiple F5 Networks Products - SSH vulnerability CVE-2012-1493 |
Summary: | Multiple F5 Networks products are prone to an SSH vulnerability. |
Description: | Summary: Multiple F5 Networks products are prone to an SSH vulnerability. Vulnerability Insight: A platform-specific remote root access vulnerability has been discovered that may allow a remote user to gain privileged access to affected systems using SSH The vulnerability is caused by a publicly known SSH private key for the root user which is present on all vulnerable appliances. Affected Software/OS: The following platforms are affected by this issue: VIPRION B2100, B4100, and B4200 BIG-IP 520, 540, 1000, 2000, 2400, 5000, 5100, 1600, 3600, 3900, 6900, 8900, 8950, 11000, and 11050 BIG-IP Virtual Edition Enterprise Manager 3000 and 4000 Solution: Updates are available. See the References for more information. CVSS Score: 7.8 CVSS Vector: AV:N/AC:L/Au:N/C:C/I:N/A:N |
Cross-Ref: |
Common Vulnerability Exposure (CVE) ID: CVE-2012-1493 http://www.theregister.co.uk/2012/06/13/f5_kit_metasploit_exploit/ https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/ssh/f5_bigip_known_privkey.rb https://www.trustmatta.com/advisories/MATTA-2012-002.txt |
Copyright | Copyright (C) 2012 Greenbone AG |
This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below. |