Sign In
- Platform
- Solutions
- Modern NDR
- Resources
- Company
Platform
Modern NDR
Resources
Platform
Modern NDR
Resources
DETECTION OVERVIEW
Risk Factors
This vulnerability is well known, and public exploit code is available. Unpatched internal BIG-IP devices are not as accessible to an attacker as BIG-IP devices that are exposed to the internet. If an exploit is successful, an attacker can create a denial of service (DoS) scenario or possibly gain control of a device by running arbitrary commands.
Kill Chain
Risk Score
88
In F5 BIG-IP devices, traffic is processed in a Traffic Management Microkernel (TMM). Devices running specific configurations of BIG-IP have a vulnerability in the TMM, which incorrectly handles URI normalization for incoming HTTP requests. An attacker can cause a buffer overflow on the BIG-IP device by sending an HTTP GET request intended for a malformed IPv6 address (for example, h://[e]). The buffer overflow can lead to a denial of service (DoS) attack or possible remote command execution (RCE).
