Remote Code Execution Vulnerability in F5 SSL Intercept iApp

CVE-2017-0305

What is CVE-2017-0305?

The F5 SSL Intercept iApp versions 1.5.0 to 1.5.7 are susceptible to an unauthenticated remote exploit that can allow attackers to alter the BIG-IP system configuration, retrieve sensitive files from the system, and potentially execute commands remotely. This vulnerability is particularly critical when the Explicit Proxy feature is utilized alongside the SNAT Auto Map option for managing egress traffic. Organizations using these configurations should take immediate action to mitigate potential threats.

References