Details of VAR-201608-0272

ID

VAR-201608-0272

CVE

CVE-2016-5736

TITLE

plural F5 Product IPsec IKE In the default configuration of the peer listener IKE Phase 1 Negotiated vulnerability

Trust: 0.8

sources: JVNDB: JVNDB-2016-004436

DESCRIPTION

The default configuration of the IPsec IKE peer listener in F5 BIG-IP LTM, Analytics, APM, ASM, and Link Controller 11.2.1 before HF16, 11.4.x, 11.5.x before 11.5.4 HF2, 11.6.x before 11.6.1, and 12.x before 12.0.0 HF2; BIG-IP AAM, AFM, and PEM 11.4.x, 11.5.x before 11.5.4 HF2, 11.6.x before 11.6.1, and 12.x before 12.0.0 HF2; BIG-IP DNS 12.x before 12.0.0 HF2; BIG-IP Edge Gateway, WebAccelerator, and WOM 11.2.1 before HF16; BIG-IP GTM 11.2.1 before HF16, 11.4.x, 11.5.x before 11.5.4 HF2, and 11.6.x before 11.6.1; and BIG-IP PSM 11.4.0 through 11.4.1 improperly enables the anonymous IPsec IKE peer configuration object, which allows remote attackers to establish an IKE Phase 1 negotiation and possibly conduct brute-force attacks against Phase 2 negotiations via unspecified vectors. Supplementary information : CWE Vulnerability type by CWE-284: Improper Access Control ( Inappropriate access control ) Has been identified. http://cwe.mitre.org/data/definitions/284.htmlBy a third party IKE Phase 1 Negotiated and phased 2 Brute force for negotiations (brute-force) An attack may be executed. Multiple F5 BIG-IP Products are prone to a security-bypass vulnerability. Successfully exploiting this issue may allow attackers to perform unauthorized actions. This may lead to other attacks. F5 BIG-IP is an all-in-one network device integrated with network traffic management, application security management, load balancing and other functions from F5 Corporation of the United States. The following products and versions are affected: F5 BIG-IP LTM, Analytics, APM, ASM, and Link Controller 11.2.1 prior to HF16, 11.4.x prior to HF16, 11.5.x prior to 11.5.4 HF2, 11.6.1 prior 11.6.x releases, 12.x releases prior to 12.0.0 HF2, BIG-IP AAM, AFM and PEM 11.4.x releases, 11.5.x releases prior to 11.5.4 HF2, 11.6.x releases prior to 11.6.1, 12.x prior to 12.0.0 HF2, BIG-IP DNS 12.x prior to 12.0.0 HF2, BIG-IP Edge Gateway, WebAccelerator, and WOM 11.2.1 prior to HF16, BIG-IP GTM prior to HF16 11.2.1 releases, 11.4.x, 11.5.x releases prior to 11.5.4 HF2, 11.6.x releases prior to 11.6.1, BIG-IP PSM 11.4.0 through 11.4.1 releases

Trust: 1.98

sources: NVD: CVE-2016-5736 // JVNDB: JVNDB-2016-004436 // BID: 92570 // VULHUB: VHN-94555

AFFECTED PRODUCTS

vendor:	f5	model:	big-ip application security manager	scope:	eq	version:	11.6.0	Trust: 2.4
vendor:	f5	model:	big-ip analytics	scope:	eq	version:	11.6.0	Trust: 2.1
vendor:	f5	model:	big-ip access policy manager	scope:	eq	version:	11.6.0	Trust: 1.8
vendor:	f5	model:	big-ip advanced firewall manager	scope:	eq	version:	11.6.0	Trust: 1.8
vendor:	f5	model:	big-ip application acceleration manager	scope:	eq	version:	11.6.0	Trust: 1.8
vendor:	f5	model:	big-ip global traffic manager	scope:	eq	version:	11.6.0	Trust: 1.8
vendor:	f5	model:	big-ip link controller	scope:	eq	version:	11.6.0	Trust: 1.8
vendor:	f5	model:	big-ip local traffic manager	scope:	eq	version:	11.6.0	Trust: 1.8
vendor:	f5	model:	big-ip policy enforcement manager	scope:	eq	version:	11.6.0	Trust: 1.8
vendor:	f5	model:	big-ip websafe	scope:	eq	version:	11.6.0	Trust: 1.8
vendor:	f5	model:	big-ip access policy manager	scope:	eq	version:	11.5.2	Trust: 1.6
vendor:	f5	model:	big-ip access policy manager	scope:	eq	version:	11.4.0	Trust: 1.6
vendor:	f5	model:	big-ip application security manager	scope:	eq	version:	12.0.0	Trust: 1.6
vendor:	f5	model:	big-ip access policy manager	scope:	eq	version:	11.4.1	Trust: 1.6
vendor:	f5	model:	big-ip local traffic manager	scope:	eq	version:	11.5.1	Trust: 1.6
vendor:	f5	model:	big-ip link controller	scope:	eq	version:	11.4.1	Trust: 1.6
vendor:	f5	model:	big-ip access policy manager	scope:	eq	version:	11.5.4	Trust: 1.6
vendor:	f5	model:	big-ip access policy manager	scope:	eq	version:	11.5.3	Trust: 1.6
vendor:	f5	model:	big-ip access policy manager	scope:	eq	version:	11.5.1	Trust: 1.6
vendor:	f5	model:	big-ip webaccelerator	scope:	eq	version:	11.2.1	Trust: 1.3
vendor:	f5	model:	big-ip link controller	scope:	eq	version:	11.2.1	Trust: 1.3
vendor:	f5	model:	big-ip edge gateway	scope:	eq	version:	11.2.1	Trust: 1.3
vendor:	f5	model:	big-ip analytics	scope:	eq	version:	11.2.1	Trust: 1.3
vendor:	f5	model:	big-ip application security manager	scope:	eq	version:	11.5.1	Trust: 1.0
vendor:	f5	model:	big-ip global traffic manager	scope:	eq	version:	11.4.1	Trust: 1.0
vendor:	f5	model:	big-ip policy enforcement manager	scope:	eq	version:	11.5.4	Trust: 1.0
vendor:	f5	model:	big-ip policy enforcement manager	scope:	eq	version:	12.0.0	Trust: 1.0
vendor:	f5	model:	big-ip analytics	scope:	eq	version:	11.4.1	Trust: 1.0
vendor:	f5	model:	big-ip global traffic manager	scope:	eq	version:	11.2.1	Trust: 1.0
vendor:	f5	model:	big-ip policy enforcement manager	scope:	eq	version:	11.5.3	Trust: 1.0
vendor:	f5	model:	big-ip global traffic manager	scope:	eq	version:	11.5.4	Trust: 1.0
vendor:	f5	model:	big-ip advanced firewall manager	scope:	eq	version:	11.5.0	Trust: 1.0
vendor:	f5	model:	big-ip application acceleration manager	scope:	eq	version:	11.5.2	Trust: 1.0
vendor:	f5	model:	big-ip analytics	scope:	eq	version:	11.5.2	Trust: 1.0
vendor:	f5	model:	big-ip application security manager	scope:	eq	version:	11.4.0	Trust: 1.0
vendor:	f5	model:	big-ip protocol security module	scope:	eq	version:	11.4.0	Trust: 1.0
vendor:	f5	model:	big-ip analytics	scope:	eq	version:	12.0.0	Trust: 1.0
vendor:	f5	model:	big-ip analytics	scope:	eq	version:	11.5.4	Trust: 1.0
vendor:	f5	model:	big-ip policy enforcement manager	scope:	eq	version:	11.5.1	Trust: 1.0
vendor:	f5	model:	big-ip global traffic manager	scope:	eq	version:	11.5.3	Trust: 1.0
vendor:	f5	model:	big-ip local traffic manager	scope:	eq	version:	11.4.1	Trust: 1.0
vendor:	f5	model:	big-ip link controller	scope:	eq	version:	11.5.0	Trust: 1.0
vendor:	f5	model:	big-ip global traffic manager	scope:	eq	version:	11.5.1	Trust: 1.0
vendor:	f5	model:	big-ip link controller	scope:	eq	version:	11.4.0	Trust: 1.0
vendor:	f5	model:	big-ip local traffic manager	scope:	eq	version:	11.5.2	Trust: 1.0
vendor:	f5	model:	big-ip advanced firewall manager	scope:	eq	version:	11.4.1	Trust: 1.0
vendor:	f5	model:	big-ip analytics	scope:	eq	version:	11.5.1	Trust: 1.0
vendor:	f5	model:	big-ip access policy manager	scope:	eq	version:	12.0.0	Trust: 1.0
vendor:	f5	model:	big-ip advanced firewall manager	scope:	eq	version:	11.5.2	Trust: 1.0
vendor:	f5	model:	big-ip advanced firewall manager	scope:	eq	version:	12.0.0	Trust: 1.0
vendor:	f5	model:	big-ip advanced firewall manager	scope:	eq	version:	11.5.4	Trust: 1.0
vendor:	f5	model:	big-ip domain name system	scope:	eq	version:	12.0.0	Trust: 1.0
vendor:	f5	model:	big-ip application acceleration manager	scope:	eq	version:	11.5.0	Trust: 1.0
vendor:	f5	model:	big-ip link controller	scope:	eq	version:	11.5.2	Trust: 1.0
vendor:	f5	model:	big-ip link controller	scope:	eq	version:	12.0.0	Trust: 1.0
vendor:	f5	model:	big-ip link controller	scope:	eq	version:	11.5.4	Trust: 1.0
vendor:	f5	model:	big-ip application acceleration manager	scope:	eq	version:	11.4.0	Trust: 1.0
vendor:	f5	model:	big-ip analytics	scope:	eq	version:	11.4.0	Trust: 1.0
vendor:	f5	model:	big-ip link controller	scope:	eq	version:	11.5.3	Trust: 1.0
vendor:	f5	model:	big-ip local traffic manager	scope:	eq	version:	11.5.0	Trust: 1.0
vendor:	f5	model:	big-ip application acceleration manager	scope:	eq	version:	11.4.1	Trust: 1.0
vendor:	f5	model:	big-ip link controller	scope:	eq	version:	11.5.1	Trust: 1.0
vendor:	f5	model:	big-ip policy enforcement manager	scope:	eq	version:	11.5.2	Trust: 1.0
vendor:	f5	model:	big-ip local traffic manager	scope:	eq	version:	11.4.0	Trust: 1.0
vendor:	f5	model:	big-ip access policy manager	scope:	eq	version:	11.5.0	Trust: 1.0
vendor:	f5	model:	big-ip application acceleration manager	scope:	eq	version:	12.0.0	Trust: 1.0
vendor:	f5	model:	big-ip application acceleration manager	scope:	eq	version:	11.5.4	Trust: 1.0
vendor:	f5	model:	big-ip global traffic manager	scope:	eq	version:	11.5.2	Trust: 1.0
vendor:	f5	model:	big-ip application security manager	scope:	eq	version:	11.5.0	Trust: 1.0
vendor:	f5	model:	big-ip advanced firewall manager	scope:	eq	version:	11.4.0	Trust: 1.0
vendor:	f5	model:	big-ip application acceleration manager	scope:	eq	version:	11.5.3	Trust: 1.0
vendor:	f5	model:	big-ip websafe	scope:	eq	version:	12.0.0	Trust: 1.0
vendor:	f5	model:	big-ip analytics	scope:	eq	version:	11.5.3	Trust: 1.0
vendor:	f5	model:	big-ip local traffic manager	scope:	eq	version:	11.2.1	Trust: 1.0
vendor:	f5	model:	big-ip application acceleration manager	scope:	eq	version:	11.5.1	Trust: 1.0
vendor:	f5	model:	big-ip local traffic manager	scope:	eq	version:	12.0.0	Trust: 1.0
vendor:	f5	model:	big-ip local traffic manager	scope:	eq	version:	11.5.4	Trust: 1.0
vendor:	f5	model:	big-ip application security manager	scope:	eq	version:	11.4.1	Trust: 1.0
vendor:	f5	model:	big-ip access policy manager	scope:	eq	version:	11.2.1	Trust: 1.0
vendor:	f5	model:	big-ip protocol security module	scope:	eq	version:	11.4.1	Trust: 1.0
vendor:	f5	model:	big-ip application security manager	scope:	eq	version:	11.2.1	Trust: 1.0
vendor:	f5	model:	big-ip local traffic manager	scope:	eq	version:	11.5.3	Trust: 1.0
vendor:	f5	model:	big-ip policy enforcement manager	scope:	eq	version:	11.5.0	Trust: 1.0
vendor:	f5	model:	big-ip application security manager	scope:	eq	version:	11.5.2	Trust: 1.0
vendor:	f5	model:	big-ip application security manager	scope:	eq	version:	11.5.4	Trust: 1.0
vendor:	f5	model:	big-ip policy enforcement manager	scope:	eq	version:	11.4.0	Trust: 1.0
vendor:	f5	model:	big-ip advanced firewall manager	scope:	eq	version:	11.5.3	Trust: 1.0
vendor:	f5	model:	big-ip global traffic manager	scope:	eq	version:	11.5.0	Trust: 1.0
vendor:	f5	model:	big-ip analytics	scope:	eq	version:	11.5.0	Trust: 1.0
vendor:	f5	model:	big-ip wan optimization manager	scope:	eq	version:	11.2.1	Trust: 1.0
vendor:	f5	model:	big-ip application security manager	scope:	eq	version:	11.5.3	Trust: 1.0
vendor:	f5	model:	big-ip global traffic manager	scope:	eq	version:	11.4.0	Trust: 1.0
vendor:	f5	model:	big-ip advanced firewall manager	scope:	eq	version:	11.5.1	Trust: 1.0
vendor:	f5	model:	big-ip policy enforcement manager	scope:	eq	version:	11.4.1	Trust: 1.0
vendor:	f5	model:	big-ip access policy manager	scope:	eq	version:	11.2.1 to 11.2.1 hf15	Trust: 0.8
vendor:	f5	model:	big-ip access policy manager	scope:	eq	version:	11.4.0 to 11.5.4 hf1	Trust: 0.8
vendor:	f5	model:	big-ip access policy manager	scope:	eq	version:	12.0.0 to 12.0.0 hf1	Trust: 0.8
vendor:	f5	model:	big-ip advanced firewall manager	scope:	eq	version:	11.4.0 to 11.5.4 hf1	Trust: 0.8
vendor:	f5	model:	big-ip advanced firewall manager	scope:	eq	version:	12.0.0 to 12.0.0 hf1	Trust: 0.8
vendor:	f5	model:	big-ip analytics	scope:	eq	version:	11.2.1 to 11.2.1 hf15	Trust: 0.8
vendor:	f5	model:	big-ip analytics	scope:	eq	version:	11.4.0 to 11.5.4 hf1	Trust: 0.8
vendor:	f5	model:	big-ip analytics	scope:	eq	version:	12.0.0 to 12.0.0 hf1	Trust: 0.8
vendor:	f5	model:	big-ip application acceleration manager	scope:	eq	version:	11.4.0 to 11.5.4 hf1	Trust: 0.8
vendor:	f5	model:	big-ip application acceleration manager	scope:	eq	version:	12.0.0 to 12.0.0 hf1	Trust: 0.8
vendor:	f5	model:	big-ip application security manager	scope:	eq	version:	11.2.1 to 11.2.1 hf15	Trust: 0.8
vendor:	f5	model:	big-ip application security manager	scope:	eq	version:	11.4.0 to 11.5.4 hf1	Trust: 0.8
vendor:	f5	model:	big-ip application security manager	scope:	eq	version:	12.0.0 to 12.0.0 hf1	Trust: 0.8
vendor:	f5	model:	big-ip domain name system	scope:	eq	version:	12.0.0 to 12.0.0 hf1	Trust: 0.8
vendor:	f5	model:	big-ip edge gateway	scope:	eq	version:	11.2.1 to 11.2.1 hf15	Trust: 0.8
vendor:	f5	model:	big-ip global traffic manager	scope:	eq	version:	11.2.1 to 11.2.1 hf15	Trust: 0.8
vendor:	f5	model:	big-ip global traffic manager	scope:	eq	version:	11.4.0 to 11.5.4 hf1	Trust: 0.8
vendor:	f5	model:	big-ip link controller	scope:	eq	version:	11.2.1 to 11.2.1 hf15	Trust: 0.8
vendor:	f5	model:	big-ip link controller	scope:	eq	version:	11.4.0 to 11.5.4 hf1	Trust: 0.8
vendor:	f5	model:	big-ip link controller	scope:	eq	version:	12.0.0 to 12.0.0 hf1	Trust: 0.8
vendor:	f5	model:	big-ip local traffic manager	scope:	eq	version:	11.2.1 to 11.2.1 hf15	Trust: 0.8
vendor:	f5	model:	big-ip local traffic manager	scope:	eq	version:	11.4.0 to 11.5.4 hf1	Trust: 0.8
vendor:	f5	model:	big-ip local traffic manager	scope:	eq	version:	12.0.0 to 12.0.0 hf1	Trust: 0.8
vendor:	f5	model:	big-ip policy enforcement manager	scope:	eq	version:	11.4.0 to 11.5.4 hf1	Trust: 0.8
vendor:	f5	model:	big-ip policy enforcement manager	scope:	eq	version:	12.0.0 to 12.0.0 hf1	Trust: 0.8
vendor:	f5	model:	big-ip protocol security module	scope:	eq	version:	11.4.0 to 11.4.1	Trust: 0.8
vendor:	f5	model:	big-ip wan optimization manager	scope:	eq	version:	11.2.1 to 11.2.1 hf15	Trust: 0.8
vendor:	f5	model:	big-ip webaccelerator	scope:	eq	version:	11.2.1 to 11.2.1 hf15	Trust: 0.8
vendor:	f5	model:	big-ip websafe	scope:	eq	version:	12.0.0 to 12.0.0 hf1	Trust: 0.8
vendor:	f5	model:	big-ip wom hf15	scope:	eq	version:	11.2.1	Trust: 0.3
vendor:	f5	model:	big-ip wom	scope:	eq	version:	11.2.1	Trust: 0.3
vendor:	f5	model:	big-ip websafe hf1	scope:	eq	version:	12.0	Trust: 0.3
vendor:	f5	model:	big-ip websafe	scope:	eq	version:	12.0	Trust: 0.3
vendor:	f5	model:	big-ip websafe	scope:	eq	version:	11.6	Trust: 0.3
vendor:	f5	model:	big-ip webaccelerator hf15	scope:	eq	version:	11.2.1	Trust: 0.3
vendor:	f5	model:	big-ip psm	scope:	eq	version:	11.4.1	Trust: 0.3
vendor:	f5	model:	big-ip psm	scope:	eq	version:	11.4	Trust: 0.3
vendor:	f5	model:	big-ip pem	scope:	eq	version:	12.0	Trust: 0.3
vendor:	f5	model:	big-ip pem hf1	scope:	eq	version:	11.5.4	Trust: 0.3
vendor:	f5	model:	big-ip pem	scope:	eq	version:	11.4	Trust: 0.3
vendor:	f5	model:	big-ip pem hf1	scope:	eq	version:	12.0.0	Trust: 0.3
vendor:	f5	model:	big-ip pem	scope:	eq	version:	11.6.0	Trust: 0.3
vendor:	f5	model:	big-ip ltm	scope:	eq	version:	12.0	Trust: 0.3
vendor:	f5	model:	big-ip ltm hf1	scope:	eq	version:	11.5.4	Trust: 0.3
vendor:	f5	model:	big-ip ltm	scope:	eq	version:	11.4	Trust: 0.3
vendor:	f5	model:	big-ip ltm hf15	scope:	eq	version:	11.2.1	Trust: 0.3
vendor:	f5	model:	big-ip ltm hf1	scope:	eq	version:	12.0.0	Trust: 0.3
vendor:	f5	model:	big-ip ltm	scope:	eq	version:	11.6.0	Trust: 0.3
vendor:	f5	model:	big-ip ltm	scope:	eq	version:	11.2.1	Trust: 0.3
vendor:	f5	model:	big-ip link controller	scope:	eq	version:	12.0	Trust: 0.3
vendor:	f5	model:	big-ip link controller	scope:	eq	version:	11.6	Trust: 0.3
vendor:	f5	model:	big-ip link controller hf1	scope:	eq	version:	11.5.4	Trust: 0.3
vendor:	f5	model:	big-ip link controller hf15	scope:	eq	version:	11.2.1	Trust: 0.3
vendor:	f5	model:	big-ip link controller hf1	scope:	eq	version:	12.0.0	Trust: 0.3
vendor:	f5	model:	big-ip gtm hf1	scope:	eq	version:	11.5.4	Trust: 0.3
vendor:	f5	model:	big-ip gtm	scope:	eq	version:	11.4	Trust: 0.3
vendor:	f5	model:	big-ip gtm hf15	scope:	eq	version:	11.2.1	Trust: 0.3
vendor:	f5	model:	big-ip gtm	scope:	eq	version:	11.6.0	Trust: 0.3
vendor:	f5	model:	big-ip gtm	scope:	eq	version:	11.2.1	Trust: 0.3
vendor:	f5	model:	big-ip edge gateway hf15	scope:	eq	version:	11.2.1	Trust: 0.3
vendor:	f5	model:	big-ip dns	scope:	eq	version:	12.0	Trust: 0.3
vendor:	f5	model:	big-ip dns hf1	scope:	eq	version:	12.0.0	Trust: 0.3
vendor:	f5	model:	big-ip asm	scope:	eq	version:	12.0	Trust: 0.3
vendor:	f5	model:	big-ip asm hf1	scope:	eq	version:	11.5.4	Trust: 0.3
vendor:	f5	model:	big-ip asm	scope:	eq	version:	11.4	Trust: 0.3
vendor:	f5	model:	big-ip asm hf15	scope:	eq	version:	11.2.1	Trust: 0.3
vendor:	f5	model:	big-ip asm hf1	scope:	eq	version:	12.0.0	Trust: 0.3
vendor:	f5	model:	big-ip asm	scope:	eq	version:	11.6.0	Trust: 0.3
vendor:	f5	model:	big-ip asm	scope:	eq	version:	11.2.1	Trust: 0.3
vendor:	f5	model:	big-ip apm	scope:	eq	version:	12.0	Trust: 0.3
vendor:	f5	model:	big-ip apm hf1	scope:	eq	version:	11.5.4	Trust: 0.3
vendor:	f5	model:	big-ip apm hf1	scope:	eq	version:	12.0.0	Trust: 0.3
vendor:	f5	model:	big-ip apm	scope:	eq	version:	11.6.0	Trust: 0.3
vendor:	f5	model:	big-ip apm	scope:	eq	version:	11.4.0	Trust: 0.3
vendor:	f5	model:	big-ip apm hf5	scope:	eq	version:	11.2.1	Trust: 0.3
vendor:	f5	model:	big-ip apm	scope:	eq	version:	11.2.1	Trust: 0.3
vendor:	f5	model:	big-ip analytics	scope:	eq	version:	12.0	Trust: 0.3
vendor:	f5	model:	big-ip analytics hf1	scope:	eq	version:	11.5.4	Trust: 0.3
vendor:	f5	model:	big-ip analytics	scope:	eq	version:	11.4	Trust: 0.3
vendor:	f5	model:	big-ip analytics hf15	scope:	eq	version:	11.2.1	Trust: 0.3
vendor:	f5	model:	big-ip analytics hf1	scope:	eq	version:	12.0.0	Trust: 0.3
vendor:	f5	model:	big-ip afm	scope:	eq	version:	12.0	Trust: 0.3
vendor:	f5	model:	big-ip afm hf1	scope:	eq	version:	11.5.4	Trust: 0.3
vendor:	f5	model:	big-ip afm	scope:	eq	version:	11.4	Trust: 0.3
vendor:	f5	model:	big-ip afm hf1	scope:	eq	version:	12.0.0	Trust: 0.3
vendor:	f5	model:	big-ip afm	scope:	eq	version:	11.6.0	Trust: 0.3
vendor:	f5	model:	big-ip aam	scope:	eq	version:	12.0	Trust: 0.3
vendor:	f5	model:	big-ip aam hf1	scope:	eq	version:	11.5.4	Trust: 0.3
vendor:	f5	model:	big-ip aam hf1	scope:	eq	version:	12.0.0	Trust: 0.3
vendor:	f5	model:	big-ip aam	scope:	eq	version:	11.6.0	Trust: 0.3
vendor:	f5	model:	big-ip aam	scope:	eq	version:	11.4.0	Trust: 0.3
vendor:	f5	model:	big-ip wom hf2	scope:	ne	version:	11.5.4	Trust: 0.3
vendor:	f5	model:	big-ip wom	scope:	ne	version:	10.2.4	Trust: 0.3
vendor:	f5	model:	big-ip wom	scope:	ne	version:	10.2.1	Trust: 0.3
vendor:	f5	model:	big-ip websafe	scope:	ne	version:	12.1	Trust: 0.3
vendor:	f5	model:	big-ip websafe hf2	scope:	ne	version:	12.0	Trust: 0.3
vendor:	f5	model:	big-ip websafe	scope:	ne	version:	11.6.1	Trust: 0.3
vendor:	f5	model:	big-ip webaccelerator hf2	scope:	ne	version:	11.5.4	Trust: 0.3
vendor:	f5	model:	big-ip webaccelerator	scope:	ne	version:	10.2.4	Trust: 0.3
vendor:	f5	model:	big-ip webaccelerator	scope:	ne	version:	10.2.1	Trust: 0.3
vendor:	f5	model:	big-ip psm	scope:	ne	version:	10.2.4	Trust: 0.3
vendor:	f5	model:	big-ip psm	scope:	ne	version:	10.2.1	Trust: 0.3
vendor:	f5	model:	big-ip pem hf2	scope:	ne	version:	12.0	Trust: 0.3
vendor:	f5	model:	big-ip pem	scope:	ne	version:	11.6.1	Trust: 0.3
vendor:	f5	model:	big-ip pem hf2	scope:	ne	version:	11.5.4	Trust: 0.3
vendor:	f5	model:	big-ip pem	scope:	ne	version:	12.1.0	Trust: 0.3
vendor:	f5	model:	big-ip ltm	scope:	ne	version:	11.6.1	Trust: 0.3
vendor:	f5	model:	big-ip ltm hf2	scope:	ne	version:	11.5.4	Trust: 0.3
vendor:	f5	model:	big-ip ltm hf16	scope:	ne	version:	11.2.1	Trust: 0.3
vendor:	f5	model:	big-ip ltm	scope:	ne	version:	10.2.4	Trust: 0.3
vendor:	f5	model:	big-ip ltm	scope:	ne	version:	12.1.0	Trust: 0.3
vendor:	f5	model:	big-ip ltm hf2	scope:	ne	version:	12.0.0	Trust: 0.3
vendor:	f5	model:	big-ip ltm	scope:	ne	version:	10.2.1	Trust: 0.3
vendor:	f5	model:	big-ip link controller hf2	scope:	ne	version:	12.0	Trust: 0.3
vendor:	f5	model:	big-ip link controller hf2	scope:	ne	version:	11.5.4	Trust: 0.3
vendor:	f5	model:	big-ip link controller hf16	scope:	ne	version:	11.2.1	Trust: 0.3
vendor:	f5	model:	big-ip link controller	scope:	ne	version:	10.2.4	Trust: 0.3
vendor:	f5	model:	big-ip link controller	scope:	ne	version:	10.2.1	Trust: 0.3
vendor:	f5	model:	big-ip link controller	scope:	ne	version:	12.1.0	Trust: 0.3
vendor:	f5	model:	big-ip link controller	scope:	ne	version:	11.6.1	Trust: 0.3
vendor:	f5	model:	big-ip gtm	scope:	ne	version:	11.6.1	Trust: 0.3
vendor:	f5	model:	big-ip gtm hf2	scope:	ne	version:	11.5.4	Trust: 0.3
vendor:	f5	model:	big-ip gtm hf16	scope:	ne	version:	11.2.1	Trust: 0.3
vendor:	f5	model:	big-ip gtm	scope:	ne	version:	10.2.4	Trust: 0.3
vendor:	f5	model:	big-ip gtm	scope:	ne	version:	10.2.1	Trust: 0.3
vendor:	f5	model:	big-ip edge gateway hf16	scope:	ne	version:	11.2.1	Trust: 0.3
vendor:	f5	model:	big-ip edge gateway	scope:	ne	version:	10.2.4	Trust: 0.3
vendor:	f5	model:	big-ip edge gateway	scope:	ne	version:	10.2.1	Trust: 0.3
vendor:	f5	model:	big-ip dns hf2	scope:	ne	version:	12.0	Trust: 0.3
vendor:	f5	model:	big-ip dns	scope:	ne	version:	12.1.0	Trust: 0.3
vendor:	f5	model:	big-ip asm	scope:	ne	version:	11.6.1	Trust: 0.3
vendor:	f5	model:	big-ip asm hf2	scope:	ne	version:	11.5.4	Trust: 0.3
vendor:	f5	model:	big-ip asm hf16	scope:	ne	version:	11.2.1	Trust: 0.3
vendor:	f5	model:	big-ip asm	scope:	ne	version:	10.2.4	Trust: 0.3
vendor:	f5	model:	big-ip asm	scope:	ne	version:	10.2.1	Trust: 0.3
vendor:	f5	model:	big-ip asm	scope:	ne	version:	12.1.0	Trust: 0.3
vendor:	f5	model:	big-ip asm hf2	scope:	ne	version:	12.0.0	Trust: 0.3
vendor:	f5	model:	big-ip apm hf2	scope:	ne	version:	12.0	Trust: 0.3
vendor:	f5	model:	big-ip apm	scope:	ne	version:	11.6.1	Trust: 0.3
vendor:	f5	model:	big-ip apm hf2	scope:	ne	version:	11.5.4	Trust: 0.3
vendor:	f5	model:	big-ip apm hf16	scope:	ne	version:	11.2.1	Trust: 0.3
vendor:	f5	model:	big-ip apm	scope:	ne	version:	10.2.4	Trust: 0.3
vendor:	f5	model:	big-ip apm	scope:	ne	version:	12.1.0	Trust: 0.3
vendor:	f5	model:	big-ip apm	scope:	ne	version:	10.2.1	Trust: 0.3
vendor:	f5	model:	big-ip analytics	scope:	ne	version:	11.6.1	Trust: 0.3
vendor:	f5	model:	big-ip analytics hf2	scope:	ne	version:	11.5.4	Trust: 0.3
vendor:	f5	model:	big-ip analytics hf16	scope:	ne	version:	11.2.1	Trust: 0.3
vendor:	f5	model:	big-ip analytics	scope:	ne	version:	12.1.0	Trust: 0.3
vendor:	f5	model:	big-ip analytics hf2	scope:	ne	version:	12.0.0	Trust: 0.3
vendor:	f5	model:	big-ip afm	scope:	ne	version:	11.6.1	Trust: 0.3
vendor:	f5	model:	big-ip afm hf2	scope:	ne	version:	11.5.4	Trust: 0.3
vendor:	f5	model:	big-ip afm	scope:	ne	version:	12.1.0	Trust: 0.3
vendor:	f5	model:	big-ip afm hf2	scope:	ne	version:	12.0.0	Trust: 0.3
vendor:	f5	model:	big-ip aam	scope:	ne	version:	11.6.1	Trust: 0.3
vendor:	f5	model:	big-ip aam hf2	scope:	ne	version:	11.5.4	Trust: 0.3
vendor:	f5	model:	big-ip aam	scope:	ne	version:	12.1.0	Trust: 0.3
vendor:	f5	model:	big-ip aam hf2	scope:	ne	version:	12.0.0	Trust: 0.3

sources: BID: 92570 // JVNDB: JVNDB-2016-004436 // CNNVD: CNNVD-201608-011 // NVD: CVE-2016-5736

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov:	CVE-2016-5736
value:	HIGH
Trust: 1.0
NVD:	CVE-2016-5736
value:	HIGH
Trust: 0.8
CNNVD:	CNNVD-201608-011
value:	HIGH
Trust: 0.6
VULHUB:	VHN-94555
value:	MEDIUM
Trust: 0.1

nvd@nist.gov:	CVE-2016-5736
severity:	MEDIUM
baseScore:	5.0
vectorString:	AV:N/AC:L/AU:N/C:N/I:N/A:P
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	NONE
integrityImpact:	NONE
availabilityImpact:	PARTIAL
exploitabilityScore:	10.0
impactScore:	2.9
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 1.8
VULHUB:	VHN-94555
severity:	MEDIUM
baseScore:	5.0
vectorString:	AV:N/AC:L/AU:N/C:N/I:N/A:P
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	NONE
integrityImpact:	NONE
availabilityImpact:	PARTIAL
exploitabilityScore:	10.0
impactScore:	2.9
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.1

nvd@nist.gov:	CVE-2016-5736
baseSeverity:	HIGH
baseScore:	7.5
vectorString:	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
attackVector:	NETWORK
attackComplexity:	LOW
privilegesRequired:	NONE
userInteraction:	NONE
scope:	UNCHANGED
confidentialityImpact:	NONE
integrityImpact:	NONE
availabilityImpact:	HIGH
exploitabilityScore:	3.9
impactScore:	3.6
version:	3.0
Trust: 1.8

sources: VULHUB: VHN-94555 // JVNDB: JVNDB-2016-004436 // CNNVD: CNNVD-201608-011 // NVD: CVE-2016-5736

PROBLEMTYPE DATA

problemtype:	CWE-284	Trust: 1.1
problemtype:	CWE-Other	Trust: 0.8

sources: VULHUB: VHN-94555 // JVNDB: JVNDB-2016-004436 // NVD: CVE-2016-5736

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-201608-011

TYPE

access control error

Trust: 0.6

sources: CNNVD: CNNVD-201608-011

CONFIGURATIONS

sources: JVNDB: JVNDB-2016-004436

PATCH

title:	SOL10133477: BIG-IP IPsec IKE peer listener vulnerability CVE-2016-5736	url:	https://support.f5.com/kb/en-us/solutions/public/k/10/sol10133477.html	Trust: 0.8
title:	Multiple F5 product Security vulnerabilities	url:	http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=63640	Trust: 0.6

sources: JVNDB: JVNDB-2016-004436 // CNNVD: CNNVD-201608-011

EXTERNAL IDS

db:	NVD	id:	CVE-2016-5736	Trust: 2.8
db:	SECTRACK	id:	1036618	Trust: 1.7
db:	JVNDB	id:	JVNDB-2016-004436	Trust: 0.8
db:	CNNVD	id:	CNNVD-201608-011	Trust: 0.7
db:	BID	id:	92570	Trust: 0.4
db:	VULHUB	id:	VHN-94555	Trust: 0.1

sources: VULHUB: VHN-94555 // BID: 92570 // JVNDB: JVNDB-2016-004436 // CNNVD: CNNVD-201608-011 // NVD: CVE-2016-5736

REFERENCES

url:	https://support.f5.com/kb/en-us/solutions/public/k/10/sol10133477.html	Trust: 2.0
url:	http://www.securitytracker.com/id/1036618	Trust: 1.7
url:	http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2016-5736	Trust: 0.8
url:	http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2016-5736	Trust: 0.8
url:	http://www.f5.com/products/big-ip/	Trust: 0.3

sources: VULHUB: VHN-94555 // BID: 92570 // JVNDB: JVNDB-2016-004436 // CNNVD: CNNVD-201608-011 // NVD: CVE-2016-5736

CREDITS

The vendor reported this issue.

Trust: 0.3

sources: BID: 92570

SOURCES

db:	VULHUB	id:	VHN-94555
db:	BID	id:	92570
db:	JVNDB	id:	JVNDB-2016-004436
db:	CNNVD	id:	CNNVD-201608-011
db:	NVD	id:	CVE-2016-5736

LAST UPDATE DATE

2024-11-23T22:45:49.213000+00:00

SOURCES UPDATE DATE

db:	VULHUB	id:	VHN-94555	date:	2019-06-06T00:00:00
db:	BID	id:	92570	date:	2016-08-10T00:00:00
db:	JVNDB	id:	JVNDB-2016-004436	date:	2016-08-23T00:00:00
db:	CNNVD	id:	CNNVD-201608-011	date:	2019-06-10T00:00:00
db:	NVD	id:	CVE-2016-5736	date:	2024-11-21T02:54:55.510

SOURCES RELEASE DATE

db:	VULHUB	id:	VHN-94555	date:	2016-08-19T00:00:00
db:	BID	id:	92570	date:	2016-08-10T00:00:00
db:	JVNDB	id:	JVNDB-2016-004436	date:	2016-08-23T00:00:00
db:	CNNVD	id:	CNNVD-201608-011	date:	2016-08-19T00:00:00
db:	NVD	id:	CVE-2016-5736	date:	2016-08-19T21:59:12.400