CVE-2017-6161: F5 BIG-IP Access Policy Manager

Medium severity, CVSS 5.3. EPSS: 1% chance of exploitation in the next 30 days.

In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, GTM, Link Controller, PEM, WebAccelerator software version 12.0.0 - 12.1.2, 11.6.0 - 11.6.1, 11.4.0 - 11.5.4, 11.2.1, when ConfigSync is configured, attackers on adjacent networks may be able to bypass the TLS protections usually used to encrypted and authenticate connections to mcpd. This vulnerability may allow remote attackers to cause a denial-of-service (DoS) attack via resource exhaustion.

Affected products

  • F5 BIG-IP Access Policy Manager: from 11.5.0, up to and including 11.5.4; version 11.2.1 only; version 11.6.0 only; version 11.6.1 only; version 12.0.0 only; version 12.1.0 only; …
  • F5 BIG-IP Advanced Firewall Manager: from 11.5.0, up to and including 11.5.4; version 11.2.1 only; version 11.6.0 only; version 11.6.1 only; version 12.0.0 only; version 12.1.0 only; …
  • F5 BIG-IP Application Acceleration Manager: from 11.5.0, up to and including 11.5.4; version 11.2.1 only; version 11.6.0 only; version 11.6.1 only; version 12.0.0 only; version 12.1.0 only; …
  • F5 BIG-IP Application Security Manager: from 11.5.0, up to and including 11.5.4; version 11.2.1 only; version 11.6.0 only; version 11.6.1 only; version 12.0.0 only; version 12.1.0 only; …
  • F5 BIG-IP Domain Name System: from 11.4.0, up to and including 11.5.4; version 11.2.1 only; version 11.6.0 only; version 11.6.1 only; version 12.0.0 only; version 12.1.0 only; …
  • F5 BIG-IP Edge Gateway: version 11.2.1 only; version 11.4.0 only; version 11.4.1 only; version 11.5.0 only; version 11.5.1 only; version 11.5.2 only; …
  • F5 BIG-IP Global Traffic Manager: version 11.2.1 only; version 11.4.0 only; version 11.4.1 only; version 11.5.0 only; version 11.5.1 only; version 11.5.2 only; …
  • F5 BIG-IP Link Controller: from 11.5.0, up to and including 11.5.4; version 11.2.1 only; version 11.6.0 only; version 11.6.1 only; version 12.0.0 only; version 12.1.0 only; …
  • F5 BIG-IP Local Traffic Manager: from 11.5.0, up to and including 11.5.4; version 11.2.1 only; version 11.6.0 only; version 11.6.1 only; version 12.0.0 only; version 12.1.0 only; …
  • F5 BIG-IP Policy Enforcement Manager: from 11.5.0, up to and including 11.5.4; version 11.2.1 only; version 11.6.0 only; version 11.6.1 only; version 12.0.0 only; version 12.1.0 only; …
  • F5 BIG-IP Webaccelerator: version 11.2.1 only; version 11.4.0 only; version 11.4.1 only; version 11.5.0 only; version 11.5.1 only; version 11.5.2 only; …

Published 2017-10-27. Last modified 2026-06-17.