CVE-2015-7394

Severity

90%

Complexity

80%

Confidentiality

165%

The datastor kernel module in F5 BIG-IP Analytics, APM, ASM, Link Controller, and LTM 11.1.0 before 12.0.0, BIG-IP AAM 11.4.0 before 12.0.0, BIG-IP AFM, PEM 11.3.0 before 12.0.0, BIG-IP Edge Gateway, WebAccelerator, and WOM 11.1.0 through 11.3.0, BIG-IP GTM 11.1.0 through 11.6.0, BIG-IP PSM 11.1.0 through 11.4.1, BIG-IQ Cloud and Security 4.0.0 through 4.5.0, BIG-IQ Device 4.2.0 through 4.5.0, BIG-IQ ADC 4.5.0, and Enterprise Manager 3.0.0 through 3.1.1 allows remote authenticated users to cause a denial of service or gain privileges by leveraging permission to upload and execute code.

The datastor kernel module in F5 BIG-IP Analytics, APM, ASM, Link Controller, and LTM 11.1.0 before 12.0.0, BIG-IP AAM 11.4.0 before 12.0.0, BIG-IP AFM, PEM 11.3.0 before 12.0.0, BIG-IP Edge Gateway, WebAccelerator, and WOM 11.1.0 through 11.3.0, BIG-IP GTM 11.1.0 through 11.6.0, BIG-IP PSM 11.1.0 through 11.4.1, BIG-IQ Cloud and Security 4.0.0 through 4.5.0, BIG-IQ Device 4.2.0 through 4.5.0, BIG-IQ ADC 4.5.0, and Enterprise Manager 3.0.0 through 3.1.1 allows remote authenticated users to cause a denial of service or gain privileges by leveraging permission to upload and execute code.

CVSS 2.0 Base Score 9. CVSS Attack Vector: network. CVSS Attack Complexity: low. CVSS Vector: (AV:N/AC:L/Au:S/C:C/I:C/A:C).

Overview

Type

F5

First reported 9 years ago

2015-11-06 18:59:00

Last updated 5 years ago

2019-06-06 15:11:00

Affected Software

F5 Big-IQ Device 4.2.0

4.2.0

F5 Big-IQ Device 4.3.0

4.3.0

F5 Big-IQ Device 4.4.0

4.4.0

F5 BIG-IP Device 4.5.0

4.5.0

F5 Networks BIGIP Policy Enforcement Manager 11.3.0

11.3.0

F5 BIG-IP Policy Enforcement Manager 11.4.0

11.4.0

F5 BIG-IP Policy Enforcement Manager 11.4.1

11.4.1

F5 BIG-IP Policy Enforcement Manager 11.5.0

11.5.0

F5 Networks BIGIP Policy Enforcement Manager 11.5.1

11.5.1

F5 BIG-IP Policy Enforcement Manager 11.5.2

11.5.2

F5 Networks BIG-IP Policy Enforcement Manager 11.5.3

11.5.3

F5 BIG-IP Policy Enforcement Manager 11.6.0

11.6.0

F5 BIG-IP Global Traffic Manager (GTM) 11.1.0

11.1.0

F5 BIG-IP Global Traffic Manager (GTM) 11.2.0

11.2.0

F5 Networks BIGIP Global Traffic Manager 11.2.1

11.2.1

F5 BIG-IP Global Traffic Manager 11.3.0

11.3.0

F5 BIG-IP Global Traffic Manager 11.4.0

11.4.0

F5 BIG-IP Global Traffic Manager 11.4.1

11.4.1

F5 BIG-IP Global Traffic Manager 11.5.0

11.5.0

F5 Networks BIGIP Global Traffic Manager 11.5.1

11.5.1

F5 BIG-IP Global Traffic Manager 11.5.2

11.5.2

F5 BIG-IP Global Traffic Manager 11.5.3

11.5.3

F5 BIG-IP Global Traffic Manager 11.6.0

11.6.0

F5 BIG-IP Analytics 11.1.0

11.1.0

F5 BIG-IP Analytics 11.2.0

11.2.0

F5 Networks BIGIP Analytics 11.2.1

11.2.1

F5 BIG-IP Analytics 11.3.0

11.3.0

F5 BIG-IP Analytics 11.4.0

11.4.0

F5 BIG-IP Analytics 11.4.1

11.4.1

F5 BIG-IP Analytics 11.5.0

11.5.0

F5 Networks BIGIP Analytics 11.5.1

11.5.1

F5 BIG-IP Analytics 11.5.2

11.5.2

F5 BIG-IP Analytics 11.5.3

11.5.3

F5 BIG-IP Analytics 11.6.0

11.6.0

F5 BIG-IP Link Controller 11.1.0

11.1.0

F5 BIG-IP Link Controller 11.2.0

11.2.0

F5 Networks BIGIP Link Controller 11.2.1

11.2.1

F5 BIG-IP Link Controller 11.3.0

11.3.0

F5 BIG-IP Link Controller 11.4.0

11.4.0

F5 BIG-IP Link Controller 11.4.1

11.4.1

F5 BIG-IP Link Controller 11.5.0

11.5.0

F5 Networks BIGIP Link Controller 11.5.1

11.5.1

F5 BIG-IP Link Controller 11.5.2

11.5.2

F5 BIG-IP Link Controller 11.5.3

11.5.3

F5 BIG-IP Link Controller 11.6.0

11.6.0

F5 BIG-IP WebAccelerator 11.1.0

11.1.0

F5 BIG-IP WebAccelerator 11.2.0

11.2.0

F5 Networks BIGIP WebAccelerator 11.2.1

11.2.1

F5 Networks BIGIP WebAccelerator 11.3.0

11.3.0

F5 BIG-IP Application Security Manager (PSM) 11.1.0

11.1.0

F5 BIG-IP Application Security Manager (ASM) 11.2.0

11.2.0

F5 Networks BIG-IP Application Security Manager 11.2.1

11.2.1

F5 BIG-IP Application Security Manager 11.3.0

11.3.0

F5 BIG-IP Application Security Manager 11.4.0

11.4.0

F5 BIG-IP Application Security Manager 11.4.1

11.4.1

F5 BIG-IP Application Security Manager 11.5.0

11.5.0

F5 Networks BIG-IP Application Security Manager 11.5.1

11.5.1

F5 BIG-IP Application Security Manager 11.5.2

11.5.2

F5 BIG-IP Application Security Manager 11.5.3

11.5.3

F5 BIG-IP Application Security Manager 11.6.0

11.6.0

F5 Big-IQ Security 4.0.0

4.0.0

F5 Big-IQ Security 4.1.0

4.1.0

F5 Big-IQ Security 4.2.0

4.2.0

F5 Big-IQ Security 4.3.0

4.3.0

F5 Big-IQ Security 4.4.0

4.4.0

F5 BIG-IP Security 4.5.0

4.5.0

F5 BIG-IP Wan Optimization Manager (WOM) 11.1.0

11.1.0

F5 BIG-IP WAN Optimization Manager (WOM) 11.2.0

11.2.0

F5 Networks BIGIP WAN Optimization Manager 11.2.1

11.2.1

F5 Networks BIGIP WAN Optimization Manager 11.3.0

11.3.0

F5 BIG-IP Edge Gateway 11.1.0

11.1.0

F5 BIG-IP Edge Gateway 11.2.0

11.2.0

F5 BIG-IP IP Edge Gateway 11.2.1

11.2.1

F5 BIG-IP IP Edge Gateway 11.3.0

11.3.0

F5 Big-IP Access Policy Manager (APM) 11.1.0

11.1.0

F5 Big-IP Access Policy Manager (APM) 11.2.0

11.2.0

F5 Big-IP Access Policy Manager (APM) 11.2.1

11.2.1

F5 Big-IP Access Policy Manager (APM) 11.3.0

11.3.0

F5 BIG-IP Access Policy Manager 11.4.0

11.4.0

F5 BIG-IP Access Policy Manager 11.4.1

11.4.1

F5 BIG-IP Access Policy Manager 11.5.0

11.5.0

F5 Big-IP Access Policy Manager (APM) 11.5.1

11.5.1

F5 BIG-IP Access Policy Manager 11.5.2

11.5.2

F5 BIG-IP Access Policy Manager 11.5.3

11.5.3

F5 Big-IP Access Policy Manager (APM) 11.6.0

11.6.0

F5 BIG-IP Advanced Firewall Manager 11.3.0

11.3.0

F5 BIG-IP Advanced Firewall Manager 11.4.0

11.4.0

F5 BIG-IP Advanced Firewall Manager 11.4.1

11.4.1

F5 BIG-IP Advanced Firewall Manager 11.5.0

11.5.0

F5 Networks BIGIP Advanced Firewall Manager 11.5.1

11.5.1

F5 BIG-IP Advanced Firewall Manager 11.5.2

11.5.2

F5 BIG-IP Advanced Firewall Manager 11.5.3

11.5.3

F5 BIG-IP Advanced Firewall Manager 11.6.0

11.6.0

F5 Big-IP Enterprise Manager 3.0.0

3.0.0

F5 Big-IP Enterprise Manager 3.1.0

3.1.0

F5 Big-IP Enterprise Manager 3.1.1

3.1.1

F5 Networks BIGIP Application Acceleration Manager 11.4.0

11.4.0

F5 BIG-IP Application Acceleration Manager 11.4.1

11.4.1

F5 BIG-IP Application Acceleration Manager 11.5.0

11.5.0

F5 Networks BIGIP Application Acceleration Manager 11.5.1

11.5.1

F5 BIG-IP Application Acceleration Manager 11.5.2

11.5.2

F5 BIG-IP Application Acceleration Manager 11.5.3

11.5.3

F5 BIG-IP Application Acceleration Manager 11.6.0

11.6.0

F5 BIG-IP Protocol Security Module (PSM) 11.1.0

11.1.0

F5 BIG-IP Protocol Security Module (PSM) 11.2.0

11.2.0

F5 Networks BIGIP Protocol Security Module 11.2.1

11.2.1

F5 BIG-IP Protocol Security Module (PSM) 11.3.0

11.3.0

F5 BIG-IP Protocol Security Module (PSM) 11.4.0

11.4.0

F5 Networks BIGIP Protocol Security Module 11.4.1

11.4.1

F5 Big-IQ Cloud 4.0.0

4.0.0

F5 Big-IQ Cloud 4.1.0

4.1.0

F5 Big-IQ Cloud 4.2.0

4.2.0

F5 Big-IQ Cloud 4.3.0

4.3.0

F5 Big-IQ Cloud 4.4.0

4.4.0

F5 BIG-IP Cloud 4.5.0

4.5.0

F5 BIG-IP Local Traffic Manager (LTM) 11.1.0

11.1.0

F5 BIG-IP Local Traffic Manager (LTM)11.2.0

11.2.0

F5 Networks BIGIP Local Traffic Manager (LTM) 11.2.1

11.2.1

F5 BIG-IP Local Traffic Manager 11.3.0

11.3.0

F5 BIG-IP Local Traffic Manager 11.4.0

11.4.0

F5 BIG-IP Local Traffic Manager 11.4.1

11.4.1

F5 BIG-IP Local Traffic Manager 11.5.0

11.5.0

F5 Networks BIGIP Local Traffic Manager (LTM) 11.5.1

11.5.1

F5 BIG-IP Local Traffic Manager 11.5.2

11.5.2

F5 BIG-IP Local Traffic Manager 11.5.3

11.5.3

F5 BIG-IP Adc 4.5.0

4.5.0

References

1034025

1034026

https://support.f5.com/kb/en-us/solutions/public/17000/400/sol17407.html

Vendor Advisory

Stay updated

ExploitPedia is constantly evolving. Sign up to receive a notification when we release additional functionality.

Get in touch

If you'd like to report a bug or have any suggestions for improvements then please do get in touch with us using this form. We will get back to you as soon as we can.