F5 Big-IP Application Security Manager (ASM) 16.1.4.1

CPE Details

F5 Big-IP Application Security Manager (ASM) 16.1.4.1
f5
big-ip_application_security_manager
16.1.4.1
2023-10-17
12h47 +00:00
2023-10-17
12h47 +00:00
CPE NVD
Alerte pour un CPE
Restez informé de toutes modifications pour un CPE spécifique.
Gestion des notifications

CPE Name: cpe:2.3:a:f5:big-ip_application_security_manager:16.1.4.1:*:*:*:*:*:*:*

Informations

Vendor

f5

Product

big-ip_application_security_manager

Version

16.1.4.1

Related CVE

Open and find in CVE List

CVE ID Publié Description Score Gravité
CVE-2024-41727 2024-08-14 14h32 +00:00 In BIG-IP tenants running on r2000 and r4000 series hardware, or BIG-IP Virtual Edition (VEs) using Intel E810 SR-IOV NIC, undisclosed traffic can cause an increase in memory resource utilization.   Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
8.7
Haute
CVE-2024-41164 2024-08-14 14h32 +00:00 When TCP profile with Multipath TCP enabled (MPTCP) is configured on a Virtual Server, undisclosed traffic along with conditions beyond the attackers control can cause TMM to terminate. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
8.2
Haute
CVE-2024-39778 2024-08-14 14h32 +00:00 When a stateless virtual server is configured on BIG-IP system with a High-Speed Bridge (HSB), undisclosed requests can cause TMM to terminate.   Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
8.7
Haute
CVE-2024-41723 2024-08-14 14h32 +00:00 Undisclosed requests to BIG-IP iControl REST can lead to information leak of user account names.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
5.3
Moyen
CVE-2002-20001 2021-11-11 00h00 +00:00 The Diffie-Hellman Key Agreement Protocol allows remote attackers (from the client side) to send arbitrary numbers that are actually not public keys, and trigger expensive server-side DHE modular-exponentiation calculations, aka a D(HE)at or D(HE)ater attack. The client needs very little CPU resources and network bandwidth. The attack may be more disruptive in cases where a client can require a server to select its largest supported key size. The basic attack scenario is that the client must claim that it can only communicate with DHE, and the server must be configured to allow DHE.
7.5
Haute