CVE-2012-1493: F5 BIG-IP 1000

High severity, CVSS 7.8. EPSS: 63.1% chance of exploitation in the next 30 days.

F5 BIG-IP appliances 9.x before 9.4.8-HF5, 10.x before 10.2.4, 11.0.x before 11.0.0-HF2, and 11.1.x before 11.1.0-HF3, and Enterprise Manager before 2.1.0-HF2, 2.2.x before 2.2.0-HF1, and 2.3.x before 2.3.0-HF3, use a single SSH private key across different customers' installations and do not properly restrict access to this key, which makes it easier for remote attackers to perform SSH logins via the PubkeyAuthentication option.

Affected products

F5 BIG-IP 1000
F5 BIG-IP 11000
F5 BIG-IP 11050
F5 BIG-IP 1500
F5 BIG-IP 1600
F5 BIG-IP 2400
F5 BIG-IP 3400
F5 BIG-IP 3410
F5 BIG-IP 3600
F5 BIG-IP 3900
F5 BIG-IP 4100
F5 BIG-IP 5100
F5 BIG-IP 5110
F5 BIG-IP 6400
F5 BIG-IP 6800
F5 BIG-IP 6900
F5 BIG-IP 8400
F5 BIG-IP 8800
F5 BIG-IP 8900
F5 BIG-IP 8950
F5 BIG-IP Application Security Manager: version 9.2.0 only; version 9.4.4 only; version 9.4.5 only; version 9.4.6 only; version 9.4.7 only; version 9.4.8 only; …
F5 BIG-IP Global Traffic Manager: any version; version 9.2.2 only; version 9.4.8 only; version 10.0.0 only; version 10.2.3 only; version 11.0.0 only; …
F5 BIG-IP Local Traffic Manager: any version; version 9.0.0 only; version 9.4.8 only; version 10.0.0 only; version 10.2.3 only; version 11.0.0 only; …
F5 Enterprise Manager: any version; version 1.0 only; version 2.0 only; version 2.1.0 only; version 2.2.0 only; version 2.3.0 only
F5 Tmos: any version; version 2.0 only; version 4.0 only; version 4.2 only; version 4.3 only; version 4.4 only; …

Published 2012-07-09. Last modified 2026-06-16.