CVE-2016-7468

An unauthenticated remote attacker may be able to disrupt services on F5 BIG-IP 11.4.1 - 11.5.4 devices with maliciously crafted network traffic

published March 23, 2017

CVSS
—
EPSS
2%
Percentile
77.8
In the wild
Unconfirmed
What it is

An unauthenticated remote attacker may be able to disrupt services on F5 BIG-IP 11.4.1 - 11.5.4 devices with maliciously crafted network traffic. This vulnerability affects virtual servers associated with TCP profiles when the BIG-IP system's tm.tcpprogressive db variable value is set to non-default setting "enabled". The default value for the tm.tcpprogressive db variable is "negotiate". An attacker may be able to disrupt traffic or cause the BIG-IP system to fail over to another device in the device group.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01766 · 77.8th percentile
Published
2017-03-23T14:00Z
EPSS history
Timeline
  • 23 MAR 14:00Z
    An unauthenticated remote attacker may be able to disrupt services on F5 BIG-IP 11.4.1 - 11.5.4 devices with maliciously crafted network traffic
    cvelistv5