Multiple F5 BIG-IP Products CVE-2014-2928 Remote Command Injection Vulnerability

Bugtraq ID:	67278
Class:	Input Validation Error
CVE:	CVE-2014-2928
Remote:	Yes
Local:	No
Published:	May 07 2014 12:00AM
Updated:	May 07 2014 12:00AM
Credit:	Brandon Perry
Vulnerable:	F5 Enterprise Manager 3.1 F5 Enterprise Manager 3.0 F5 Enterprise Manager 2.3 F5 Enterprise Manager 2.1 F5 BIG-IQ Security 4.3 F5 BIG-IQ Security 4.2 F5 BIG-IQ Security 4.1 F5 BIG-IQ Security 4.0 F5 BIG-IQ Device 4.3 F5 BIG-IQ Device 4.2 F5 BIG-IQ Cloud 4.3 F5 BIG-IQ Cloud 4.2 F5 BIG-IQ Cloud 4.1 F5 BIG-IQ Cloud 4.0 F5 BIG-IP WOM 11.2 F5 BIG-IP WOM 11.0 F5 BIG-IP WOM 10.2.4 F5 BIG-IP WOM 10.2.2 F5 BIG-IP WOM 10.2.1 F5 BIG-IP WOM 10.0 F5 BIG-IP WOM 11.3.0 HF4 F5 BIG-IP WOM 11.3.0 F5 BIG-IP WOM 11.2.1 HF5 F5 BIG-IP WOM 11.2.1 HF3 F5 BIG-IP WOM 11.2.1 F5 BIG-IP WOM 11.2.0 HF5 F5 BIG-IP WOM 11.2.0 HF3 F5 BIG-IP WOM 11.1.0 HF7 F5 BIG-IP WOM 11.1.0 F5 BIG-IP WOM 10.2.1 HF1 F5 BIG-IP WebAccelerator 11.3 F5 BIG-IP WebAccelerator 11.0 F5 BIG-IP WebAccelerator 10.2.4 F5 BIG-IP WebAccelerator 10.2.1 F5 BIG-IP WebAccelerator 10.0 F5 BIG-IP WebAccelerator 10.2.4 HF5 F5 BIG-IP WebAccelerator 10.2.1 HF1 F5 BIG-IP PSM 11.4.1 F5 BIG-IP PSM 11.3 F5 BIG-IP PSM 11.2 F5 BIG-IP PSM 11.1 F5 BIG-IP PSM 11.0 F5 BIG-IP PSM 10.2.4 F5 BIG-IP PSM 10.2.1 F5 BIG-IP PSM 10.0 F5 BIG-IP PSM 11.3.0 HF4 F5 BIG-IP PSM 11.2.1 HF5 F5 BIG-IP PSM 11.2.1 HF3 F5 BIG-IP PSM 11.2.1 HF2 F5 BIG-IP PSM 11.2.1 HF1 F5 BIG-IP PSM 11.2.1 F5 BIG-IP PSM 11.2.0 HF5 F5 BIG-IP PSM 11.2.0 HF3 F5 BIG-IP PSM 11.2.0 HF2 F5 BIG-IP PSM 11.1.0 HF7 F5 BIG-IP PSM 10.2.4 HF5 F5 BIG-IP PSM 10.2.4 HF4 F5 BIG-IP PSM 10.2.1 HF1 F5 BIG-IP PEM 11.5.1 F5 BIG-IP PEM 11.5 F5 BIG-IP PEM 11.3 F5 BIG-IP PEM 11.4.1 F5 BIG-IP PEM 11.3.0 HF4 F5 BIG-IP Link Controller 11.2.0 0 F5 BIG-IP Link Controller 11.5.1 F5 BIG-IP Link Controller 11.5 F5 BIG-IP Link Controller 11.3 F5 BIG-IP Link Controller 11.2.1 HF3 F5 BIG-IP Link Controller 11.2.1 F5 BIG-IP Link Controller 11.2 HF3 F5 BIG-IP Link Controller 11.1 F5 BIG-IP Link Controller 11.0 F5 BIG-IP Link Controller 10.2.4 F5 BIG-IP Link Controller 10.2.2 F5 BIG-IP Link Controller 10.2.1 F5 BIG-IP Link Controller 10.0 F5 BIG-IP Link Controller 11.4.1 F5 BIG-IP Link Controller 11.3.0 HF4 F5 BIG-IP Link Controller 11.2.1 HF5 F5 BIG-IP Link Controller 11.2.1 HF2 F5 BIG-IP Link Controller 11.2.1 HF1 F5 BIG-IP Link Controller 11.2.0 HF5 F5 BIG-IP Link Controller 11.2.0 HF2 F5 BIG-IP Link Controller 10.2.4 HF5 F5 BIG-IP Link Controller 10.2.4 HF4 F5 BIG-IP Link Controller 10.2.1 HF1 F5 BIG-IP GTM 11.5.1 F5 BIG-IP GTM 11.5 F5 BIG-IP GTM 11.3 F5 BIG-IP GTM 11.2.1 HF3 F5 BIG-IP GTM 11.2 F5 BIG-IP GTM 11.0 F5 BIG-IP GTM 10.2.4 F5 BIG-IP GTM 10.2.2 F5 BIG-IP GTM 10.2.1 F5 BIG-IP GTM 10.0 F5 BIG-IP GTM 11.4.1 F5 BIG-IP GTM 11.3.0 HF4 F5 BIG-IP GTM 11.2.1 HF5 F5 BIG-IP GTM 11.2.1 HF2 F5 BIG-IP GTM 11.2.1 HF1 F5 BIG-IP GTM 11.2.1 F5 BIG-IP GTM 11.2.0 HF5 F5 BIG-IP GTM 11.2.0 HF3 F5 BIG-IP GTM 11.2.0 HF2 F5 BIG-IP GTM 11.1.0 HF7 F5 BIG-IP GTM 11.1.0 F5 BIG-IP GTM 10.2.4 HF5 F5 BIG-IP GTM 10.2.4 HF4 F5 BIG-IP GTM 10.2.1 HF1 F5 BIG-IP Edge Gateway 11.3 F5 BIG-IP Edge Gateway 11.0 F5 BIG-IP Edge Gateway 10.2.4 F5 BIG-IP Edge Gateway 10.2.3 F5 BIG-IP Edge Gateway 10.2.2 F5 BIG-IP Edge Gateway 10.2.1 F5 BIG-IP Edge Gateway 10.2 F5 BIG-IP Edge Gateway 11.2.1 F5 BIG-IP Edge Gateway 11.2.0 F5 BIG-IP Edge Gateway 11.1.0-HF3 F5 BIG-IP Edge Gateway 11.1.0-HF2 F5 BIG-IP Edge Gateway 11.0.0-HF2 F5 BIG-IP Edge Gateway 11.0.0-HF1 F5 BIG-IP Edge Gateway 10.2.3-HF1 F5 BIG-IP Edge Gateway 10.1.0 F5 BIG-IP ASM 11.2.0 HF2 0 F5 BIG-IP ASM 11.2.0 0 F5 BIG-IP ASM 11.0.0 0 F5 BIG-IP ASM 10.2.4 0 F5 BIG-IP ASM 10.0.0 0 F5 BIG-IP ASM 11.5.1 F5 BIG-IP ASM 11.5 F5 BIG-IP ASM 10.2.2 F5 BIG-IP ASM 10.2.1 F5 BIG-IP ASM 11.4.1 F5 BIG-IP ASM 11.3.0 HF4 F5 BIG-IP ASM 11.3.0 F5 BIG-IP ASM 11.2.1 HF5 F5 BIG-IP ASM 11.2.1 HF3 F5 BIG-IP ASM 11.2.1 HF2 F5 BIG-IP ASM 11.2.1 HF1 F5 BIG-IP ASM 11.2.1 F5 BIG-IP ASM 11.2.0 HF5 F5 BIG-IP ASM 11.2.0 HF3 F5 BIG-IP ASM 11.1.0 HF7 F5 BIG-IP ASM 11.1.0 F5 BIG-IP ASM 10.2.4 HF5 F5 BIG-IP ASM 10.2.4 HF4 F5 BIG-IP ASM 10.2.1 HF1 F5 BIG-IP APM 11.5.1 F5 BIG-IP APM 11.2 F5 BIG-IP APM 11.0 F5 BIG-IP APM 10.2.4 F5 BIG-IP APM 10.2.2 F5 BIG-IP APM 11.5.0 F5 BIG-IP APM 11.4.1 F5 BIG-IP APM 11.4.0 F5 BIG-IP APM 11.3.0 HF4 F5 BIG-IP APM 11.3.0 F5 BIG-IP APM 11.2.1 HF5 F5 BIG-IP APM 11.2.1 HF3 F5 BIG-IP APM 11.2.1 HF2 F5 BIG-IP APM 11.2.1 HF1 F5 BIG-IP APM 11.2.1 F5 BIG-IP APM 11.2.0 HF5 F5 BIG-IP APM 11.2.0 HF3 F5 BIG-IP APM 11.2.0 HF2 F5 BIG-IP APM 11.1.0 HF7 F5 BIG-IP APM 11.1.0 F5 BIG-IP APM 10.2.4 HF5 F5 BIG-IP APM 10.2.4 HF4 F5 BIG-IP APM 10.2.1 HF1 F5 BIG-IP APM 10.2.1 F5 BIG-IP APM 10.1 F5 BIG-IP Analytics 11.5.1 F5 BIG-IP Analytics 11.3 F5 BIG-IP Analytics 11.2.1 HF3 F5 BIG-IP Analytics 11.2.1 F5 BIG-IP Analytics 11.2 HF3 F5 BIG-IP Analytics 11.2 F5 BIG-IP Analytics 11.4.1 F5 BIG-IP Analytics 11.3.0 HF4 F5 BIG-IP Analytics 11.2.1 HF5 F5 BIG-IP Analytics 11.2.1 HF2 F5 BIG-IP Analytics 11.2.1 HF1 F5 BIG-IP Analytics 11.2.0 HF5 F5 BIG-IP Analytics 11.2.0 HF2 F5 BIG-IP Analytics 11.1.0 HF7 F5 BIG-IP Analytics 11.1.0 F5 BIG-IP Analytics 11.0.0-HF2 F5 BIG-IP Analytics 11.0.0 F5 BIG-IP AFM 11.5.1 F5 BIG-IP AFM 11.5 F5 BIG-IP AFM 11.3 F5 BIG-IP AFM 11.4.1 F5 BIG-IP AFM 11.3.0 HF4 F5 BIG-IP AAM 11.5.1 F5 BIG-IP AAM 11.5 F5 BIG-IP AAM 11.4.1 F5 BIG-IP AAM 11.4.0
Not Vulnerable:

Multiple F5 BIG-IP Products CVE-2014-2928 Remote Command Injection Vulnerability

Multiple F5 BIG-IP Products are prone to a remote command-injection vulnerability.

Successfully exploiting this issue may allow an attacker to execute arbitrary commands in context of the affected application.

Multiple F5 BIG-IP Products CVE-2014-2928 Remote Command Injection Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].