F5 Big-IP Edge Gateway 12.1.0

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:f5:big-ip_edge_gateway:12.1.0:*:*:*:*:*:*:*

part: a version: 12.1.0 update: *

VendorF5 (cb05c4a2-e02e-586f-b9d0-d0370178d1e5)
ProductBig Ip Edge Gateway (fbccd457-991c-5aff-b545-0b8acc52d3d1)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-6593 vulnerable 2026-06-08 05:14:12.449303 Details available
On BIG-IP 11.5.1-11.5.4, 11.6.1, and 12.1.0, a virtual server configured with a Client SSL profile may be vulnerable to a chosen ciphertext attack against CBC ciphers. When exploited, this may result in plaintext recovery of encrypted messages through a man-in-the-middle (MITM) attack, despite the attacker not having gained access to the server's private key itself. (CVE-2019-6593 also known as Zombie POODLE and GOLDENDOODLE.)
Published: 2019-02-26T15:00:00.000Z
Updated: 2024-09-16T19:01:08.562Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-6161 vulnerable 2026-06-08 05:09:50.818407 Details available
In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, GTM, Link Controller, PEM, WebAccelerator software version 12.0.0 - 12.1.2, 11.6.0 - 11.6.1, 11.4.0 - 11.5.4, 11.2.1, when ConfigSync is configured, attackers on adjacent networks may be able to bypass the TLS protections usually used to encrypted and authenticate connections to mcpd. This vulnerability may allow remote attackers to cause a denial-of-service (DoS) attack via resource exhaustion.
Published: 2017-10-27T14:00:00.000Z
Updated: 2024-09-16T20:31:33.873Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.