CVE-2017-0304
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2017-0304
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
A SQL injection vulnerability exists in the BIG-IP AFM management UI on versions 12.0.0, 12.1.0, 12.1.1, 12.1.2 and 13.0.0 that may allow a copy of the firewall rules to be tampered with and impact the Configuration Utility until there is a resync of the rules. Traffic processing and the live firewall rules in use are not affected.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
F5 BIG-IP Advanced Firewall Manager Configuration utility SQL注入漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
F5 BIG-IP Advanced Firewall Manager(AFM)是美国F5公司的一款防火墙管理器，可通过扩展来阻止可能让负载平衡器、防火墙甚至网络不堪重负的高容量DDoS攻击。Configuration utility是一个配置工具。 F5 BIG-IP AFM 12.0.0版本至12.1.2版本和13.0.0版本中的Configuration utility存在SQL注入漏洞。远程攻击者可利用该漏洞篡改已配置防火墙的副本。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| F5 Networks, Inc. | BIG-IP AFM | 12.0.0, 12.1.0, 12.1.1, 12.1.2 | - |
II. Public POCs for CVE-2017-0304
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2017-0304
请登录查看更多情报信息。
- https://support.f5.com/csp/article/K39428424x_refsource_CONFIRM
- https://nvd.nist.gov/vuln/detail/CVE-2017-0304
Same Patch Batch · F5 Networks, Inc. · 2017-12-21 · 14 CVEs total
| CVE-2017-0301 | F5 BIG-IP Access Policy Manager 安全漏洞 | |
| CVE-2017-6129 | F5 BIG-IP Access Policy Manager 安全漏洞 | |
| CVE-2017-6132 | 多款F5产品安全漏洞 | |
| CVE-2017-6133 | 多款F5产品安全漏洞 | |
| CVE-2017-6134 | 多款F5产品安全漏洞 | |
| CVE-2017-6135 | 多款F5产品安全漏洞 | |
| CVE-2017-6136 | 多款F5产品安全漏洞 | |
| CVE-2017-6138 | 多款F5产品安全漏洞 | |
| CVE-2017-6139 | F5 BIG-IP Access Policy Manager 安全漏洞 | |
| CVE-2017-6140 | 多款F5 BIG-IP平台多款F5产品安全漏洞 | |
| CVE-2017-6151 | 多款F5产品安全漏洞 | |
| CVE-2017-6164 | 多款F5产品安全漏洞 | |
| CVE-2017-6167 | 多款F5产品竞争条件漏洞 |
IV. Related Vulnerabilities
V. Comments for CVE-2017-0304
No comments yet