F5 BIG-IP Ltm vulnerabilities

2 CVEs affecting F5 BIG-IP Ltm, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2017-6166, published 2017-11-22.

More from F5.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2017-6168, published 2017-11-17. High severity, CVSS 7.4. EPSS: 19.6% chance of exploitation in the next 30 days. On BIG-IP versions 11.6.0-11.6.2 (fixed in 11.6.2 HF1), 12.0.0-12.1.2 HF1 (fixed in 12.1.2 HF2), or 13.0.0-13.0.0 HF2 (fixed in 13.0.0 HF3) a virtual server configured with a Client SSL profile may…
• CVE-2017-6166, published 2017-11-22. Medium severity, CVSS 5.9. EPSS: 1.9% chance of exploitation in the next 30 days. In BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Link Controller, PEM, and WebSafe software 12.0.0 to 12.1.1, in some cases the Traffic Management Microkernel (TMM) may crash when processing…