CVE-2015-6546: Input Validation
Published Nov 6, 2015
·Updated
The vCMP host in F5 BIG-IP Analytics, APM, ASM, GTM, Link Controller, and LTM 11.0.0 before 11.6.0, BIG-IP AAM 11.4.0 before 11.6.0, BIG-IP AFM and PEM 11.3.0 before 11.6.0, BIG-IP Edge Gateway, WebAccelerator, and WOM 11.0.0 through 11.3.0, BIG-IP PSM 11.0.0 through 11.4.1 allows remote attackers to cause a denial of service via "malicious traffic."
Affected Software
101 affected components
F5 Big-ip Application Acceleration Manager=11.4.0
F5 Big-ip Application Acceleration Manager=11.4.1
F5 Big-ip Application Acceleration Manager=11.5.0
F5 Big-ip Application Acceleration Manager=11.5.1
F5 Big-ip Application Acceleration Manager=11.5.2
F5 Big-ip Application Acceleration Manager=11.5.3
F5 Big-ip Global Traffic Manager=11.0.0
F5 Big-ip Global Traffic Manager=11.1.0
F5 Big-ip Global Traffic Manager=11.2.0
F5 Big-ip Global Traffic Manager=11.2.1
F5 Big-ip Global Traffic Manager=11.3.0
F5 Big-ip Global Traffic Manager=11.4.0
F5 Big-ip Global Traffic Manager=11.4.1
F5 Big-ip Global Traffic Manager=11.5.0
F5 Big-ip Global Traffic Manager=11.5.1
F5 Big-ip Global Traffic Manager=11.5.2
F5 Big-ip Global Traffic Manager=11.5.3
F5 BIG-IP Access Policy Manager=11.0.0
F5 BIG-IP Access Policy Manager=11.1.0
F5 BIG-IP Access Policy Manager=11.2.0
F5 BIG-IP Access Policy Manager=11.2.1
F5 BIG-IP Access Policy Manager=11.3.0
F5 BIG-IP Access Policy Manager=11.4.0
F5 BIG-IP Access Policy Manager=11.4.1
F5 BIG-IP Access Policy Manager=11.5.0
F5 BIG-IP Access Policy Manager=11.5.1
F5 BIG-IP Access Policy Manager=11.5.2
F5 BIG-IP Access Policy Manager=11.5.3
F5 Big-ip Webaccelerator=11.0.0
F5 Big-ip Webaccelerator=11.1.0
F5 Big-ip Webaccelerator=11.2.0
F5 Big-ip Webaccelerator=11.2.1
F5 Big-ip Webaccelerator=11.3.0
F5 BIG-IP Application Security Manager=11.0.0
F5 BIG-IP Application Security Manager=11.1.0
F5 BIG-IP Application Security Manager=11.2.0
F5 BIG-IP Application Security Manager=11.2.1
F5 BIG-IP Application Security Manager=11.3.0
F5 BIG-IP Application Security Manager=11.4.0
F5 BIG-IP Application Security Manager=11.4.1
F5 BIG-IP Application Security Manager=11.5.0
F5 BIG-IP Application Security Manager=11.5.1
F5 BIG-IP Application Security Manager=11.5.2
F5 BIG-IP Application Security Manager=11.5.3
F5 Big-ip Policy Enforcement Manager=11.3.0
F5 Big-ip Policy Enforcement Manager=11.4.0
F5 Big-ip Policy Enforcement Manager=11.4.1
F5 Big-ip Policy Enforcement Manager=11.5.0
F5 Big-ip Policy Enforcement Manager=11.5.1
F5 Big-ip Policy Enforcement Manager=11.5.2
F5 Big-ip Policy Enforcement Manager=11.5.3
F5 Big-ip Wan Optimization Manager=11.0.0
F5 Big-ip Wan Optimization Manager=11.1.0
F5 Big-ip Wan Optimization Manager=11.2.0
F5 Big-ip Wan Optimization Manager=11.2.1
F5 Big-ip Wan Optimization Manager=11.3.0
F5 Big-ip Protocol Security Module=11.0.0
F5 Big-ip Protocol Security Module=11.1.0
F5 Big-ip Protocol Security Module=11.2.0
F5 Big-ip Protocol Security Module=11.2.1
F5 Big-ip Protocol Security Module=11.3.0
F5 Big-ip Protocol Security Module=11.4.0
F5 Big-ip Protocol Security Module=11.4.1
F5 BIG-IP Edge Gateway=11.0.0
F5 BIG-IP Edge Gateway=11.1.0
F5 BIG-IP Edge Gateway=11.2.0
F5 BIG-IP Edge Gateway=11.2.1
F5 BIG-IP Edge Gateway=11.3.0
F5 BIG-IP Advanced Firewall Manager=11.3.0
F5 BIG-IP Advanced Firewall Manager=11.4.0
F5 BIG-IP Advanced Firewall Manager=11.4.1
F5 BIG-IP Advanced Firewall Manager=11.5.0
F5 BIG-IP Advanced Firewall Manager=11.5.1
F5 BIG-IP Advanced Firewall Manager=11.5.2
F5 BIG-IP Advanced Firewall Manager=11.5.3
F5 Big-ip Link Controller=11.0.0
F5 Big-ip Link Controller=11.1.0
F5 Big-ip Link Controller=11.2.0
F5 Big-ip Link Controller=11.2.1
F5 Big-ip Link Controller=11.3.0
F5 Big-ip Link Controller=11.4.0
F5 Big-ip Link Controller=11.4.1
F5 Big-ip Link Controller=11.5.0
F5 Big-ip Link Controller=11.5.1
F5 Big-ip Link Controller=11.5.2
F5 Big-ip Link Controller=11.5.3
F5 BIG-IP Analytics=11.0.0
F5 BIG-IP Analytics=11.1.0
F5 BIG-IP Analytics=11.2.0
F5 BIG-IP Analytics=11.2.1
F5 BIG-IP Analytics=11.3.0
F5 BIG-IP Analytics=11.4.0
F5 BIG-IP Analytics=11.4.1
F5 BIG-IP Analytics=11.5.0
F5 BIG-IP Analytics=11.5.1
F5 BIG-IP Analytics=11.5.2
F5 BIG-IP Analytics=11.5.3
F5 Big-ip Local Traffic Manager=11.5.0
F5 Big-ip Local Traffic Manager=11.5.1
F5 Big-ip Local Traffic Manager=11.5.2
F5 Big-ip Local Traffic Manager=11.5.3
Event History
Nov 6, 2015
CVE Published
via MITRE·06:00 PM
Data Sourced
via MITRE·06:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2015-6546?
CVE-2015-6546 has a significant severity rating due to its potential for remote code execution in affected F5 BIG-IP products.
2
How do I fix CVE-2015-6546?
To address CVE-2015-6546, users should upgrade their F5 BIG-IP Analytics, APM, ASM, GTM, Link Controller, and LTM to versions 11.6.0 or later.
3
Which versions are affected by CVE-2015-6546?
CVE-2015-6546 affects F5 BIG-IP versions prior to 11.6.0 for various components including AAM, AFM, and PSM.
4
What are the potential risks of CVE-2015-6546?
The risks associated with CVE-2015-6546 include unauthorized access and control over the affected F5 devices, leading to potential data breaches.
5
Is it necessary to take immediate action on CVE-2015-6546?
Yes, it is essential to take immediate action by applying available patches or updates to mitigate the vulnerabilities associated with CVE-2015-6546.