CVE-2017-6131: Critical severity riverbed steelapp traffic manager vulnerability
In some circumstances, an F5 BIG-IP version 12.0.0 to 12.1.2 and 13.0.0 Azure cloud instance may contain a default administrative password which could be used to remotely log into the BIG-IP system. The impacted administrative account is the Azure instance administrative user that was created at deployment. The root and admin accounts are not vulnerable. An attacker may be able to remotely access the BIG-IP host via SSH.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2017-6131?
CVE-2017-6131 has a severity rating of critical due to the potential for unauthorized remote access using a default administrative password.
How do I fix CVE-2017-6131?
To fix CVE-2017-6131, users should change the default administrative password of the affected F5 BIG-IP versions immediately.
Which F5 BIG-IP versions are affected by CVE-2017-6131?
CVE-2017-6131 affects F5 BIG-IP versions 12.0.0 to 12.1.2 and 13.0.0.
What potential risks does CVE-2017-6131 pose?
CVE-2017-6131 poses risks such as unauthorized access to the management console and potential modifications to system configurations.
Is there a patch available for CVE-2017-6131?
Yes, there are patches available from F5 for CVE-2017-6131 that address this vulnerability.