[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fRd1wK8gPUSt3gyM4-T7BR6Fu1pnq9-jKZshBfGc5tNw":3,"g5a-family:f5\u002Fbig-ip_protocol_security_module":247,"g5a-ex:f5\u002Fbig-ip_protocol_security_module@*":248},{"success":4,"data":5},true,{"product":6,"versions":107,"topVulnerabilitiesByEpss":147,"kevVulnerabilities":212,"seoMetadata":225,"meta":244},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":106},"f5","big-ip_protocol_security_module",39,61,3,"2020-02-21",[14,19,22,25,27,30,32,34,36,39,42,45,48,50,53,56,58,60,62,64,67,69,71,73,75,77,79,81,83,85,87,89,91,93,95,97,100,102,104],{"version":15,"cve_count":16,"kev_count":17,"has_kev":18},"10.0.0",7,0,false,{"version":20,"cve_count":21,"kev_count":17,"has_kev":18},"10.0.1",4,{"version":23,"cve_count":24,"kev_count":17,"has_kev":18},"10.1.0",8,{"version":26,"cve_count":24,"kev_count":17,"has_kev":18},"10.2.0",{"version":28,"cve_count":29,"kev_count":17,"has_kev":18},"10.2.1",11,{"version":31,"cve_count":29,"kev_count":17,"has_kev":18},"10.2.2",{"version":33,"cve_count":29,"kev_count":17,"has_kev":18},"10.2.3",{"version":35,"cve_count":29,"kev_count":17,"has_kev":18},"10.2.4",{"version":37,"cve_count":38,"kev_count":17,"has_kev":18},"11.0.0",13,{"version":40,"cve_count":41,"kev_count":17,"has_kev":18},"11.1.0",14,{"version":43,"cve_count":44,"kev_count":17,"has_kev":18},"11.2.0",16,{"version":46,"cve_count":47,"kev_count":17,"has_kev":18},"11.2.1",21,{"version":49,"cve_count":47,"kev_count":17,"has_kev":18},"11.3.0",{"version":51,"cve_count":52,"kev_count":17,"has_kev":18},"11.4.0",30,{"version":54,"cve_count":55,"kev_count":17,"has_kev":18},"11.4.1",32,{"version":57,"cve_count":17,"kev_count":17,"has_kev":18},"11.5.0",{"version":59,"cve_count":17,"kev_count":17,"has_kev":18},"11.5.1",{"version":61,"cve_count":17,"kev_count":17,"has_kev":18},"11.5.2",{"version":63,"cve_count":17,"kev_count":17,"has_kev":18},"11.5.3",{"version":65,"cve_count":66,"kev_count":17,"has_kev":18},"11.6.0",1,{"version":68,"cve_count":66,"kev_count":17,"has_kev":18},"11.6.1",{"version":70,"cve_count":17,"kev_count":17,"has_kev":18},"11.6.3.4",{"version":72,"cve_count":66,"kev_count":17,"has_kev":18},"12.0.0",{"version":74,"cve_count":66,"kev_count":17,"has_kev":18},"12.1.0",{"version":76,"cve_count":66,"kev_count":17,"has_kev":18},"12.1.1",{"version":78,"cve_count":66,"kev_count":17,"has_kev":18},"12.1.2",{"version":80,"cve_count":17,"kev_count":17,"has_kev":18},"12.1.3.4",{"version":82,"cve_count":17,"kev_count":17,"has_kev":18},"12.1.3.6",{"version":84,"cve_count":17,"kev_count":17,"has_kev":18},"12.1.4",{"version":86,"cve_count":66,"kev_count":17,"has_kev":18},"13.0.0",{"version":88,"cve_count":17,"kev_count":17,"has_kev":18},"13.1.1",{"version":90,"cve_count":17,"kev_count":17,"has_kev":18},"13.1.1.1",{"version":92,"cve_count":17,"kev_count":17,"has_kev":18},"14.0.0",{"version":94,"cve_count":17,"kev_count":17,"has_kev":18},"14.0.0.2",{"version":96,"cve_count":17,"kev_count":17,"has_kev":18},"14.1.0",{"version":98,"cve_count":99,"kev_count":17,"has_kev":18},"9.4.5",2,{"version":101,"cve_count":99,"kev_count":17,"has_kev":18},"9.4.6",{"version":103,"cve_count":99,"kev_count":17,"has_kev":18},"9.4.7",{"version":105,"cve_count":99,"kev_count":17,"has_kev":18},"9.4.8","Big-ip Protocol Security Module by F5 is a technology product with 39 tracked versions and 61 known security vulnerabilities including 3 CISA Known Exploited Vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[108,109,110,111,112,113,114,115,116,117,118,119,120,121,122,123,124,125,126,127,128,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146],{"version":15,"cve_count":16,"kev_count":17,"has_kev":18},{"version":20,"cve_count":21,"kev_count":17,"has_kev":18},{"version":23,"cve_count":24,"kev_count":17,"has_kev":18},{"version":26,"cve_count":24,"kev_count":17,"has_kev":18},{"version":28,"cve_count":29,"kev_count":17,"has_kev":18},{"version":31,"cve_count":29,"kev_count":17,"has_kev":18},{"version":33,"cve_count":29,"kev_count":17,"has_kev":18},{"version":35,"cve_count":29,"kev_count":17,"has_kev":18},{"version":37,"cve_count":38,"kev_count":17,"has_kev":18},{"version":40,"cve_count":41,"kev_count":17,"has_kev":18},{"version":43,"cve_count":44,"kev_count":17,"has_kev":18},{"version":46,"cve_count":47,"kev_count":17,"has_kev":18},{"version":49,"cve_count":47,"kev_count":17,"has_kev":18},{"version":51,"cve_count":52,"kev_count":17,"has_kev":18},{"version":54,"cve_count":55,"kev_count":17,"has_kev":18},{"version":57,"cve_count":17,"kev_count":17,"has_kev":18},{"version":59,"cve_count":17,"kev_count":17,"has_kev":18},{"version":61,"cve_count":17,"kev_count":17,"has_kev":18},{"version":63,"cve_count":17,"kev_count":17,"has_kev":18},{"version":65,"cve_count":66,"kev_count":17,"has_kev":18},{"version":68,"cve_count":66,"kev_count":17,"has_kev":18},{"version":70,"cve_count":17,"kev_count":17,"has_kev":18},{"version":72,"cve_count":66,"kev_count":17,"has_kev":18},{"version":74,"cve_count":66,"kev_count":17,"has_kev":18},{"version":76,"cve_count":66,"kev_count":17,"has_kev":18},{"version":78,"cve_count":66,"kev_count":17,"has_kev":18},{"version":80,"cve_count":17,"kev_count":17,"has_kev":18},{"version":82,"cve_count":17,"kev_count":17,"has_kev":18},{"version":84,"cve_count":17,"kev_count":17,"has_kev":18},{"version":86,"cve_count":66,"kev_count":17,"has_kev":18},{"version":88,"cve_count":17,"kev_count":17,"has_kev":18},{"version":90,"cve_count":17,"kev_count":17,"has_kev":18},{"version":92,"cve_count":17,"kev_count":17,"has_kev":18},{"version":94,"cve_count":17,"kev_count":17,"has_kev":18},{"version":96,"cve_count":17,"kev_count":17,"has_kev":18},{"version":98,"cve_count":99,"kev_count":17,"has_kev":18},{"version":101,"cve_count":99,"kev_count":17,"has_kev":18},{"version":103,"cve_count":99,"kev_count":17,"has_kev":18},{"version":105,"cve_count":99,"kev_count":17,"has_kev":18},[148,156,161,169,176,182,189,195,201,207],{"cveId":149,"description":150,"publishedDate":151,"cvssScore":152,"cvssVersion":153,"severity":154,"isKev":4,"epssScore":155},"CVE-2014-6271","GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to execute arbitrary code via a crafted environment, as demonstrated by vectors involving the ForceCommand feature in OpenSSH sshd, the mod_cgi and mod_cgid modules in the Apache HTTP Server, scripts executed by unspecified DHCP clients, and other situations in which setting the environment occurs across a privilege boundary from Bash execution, aka \"ShellShock.\"  NOTE: the original fix for this issue was incorrect; CVE-2014-7169 has been assigned to cover the vulnerability that is still present after the incorrect fix.","2014-09-24",9.8,"v3.1","Critical",0.99999,{"cveId":157,"description":158,"publishedDate":159,"cvssScore":152,"cvssVersion":153,"severity":154,"isKev":4,"epssScore":160},"CVE-2014-7169","GNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed function definitions in the values of environment variables, which allows remote attackers to write to files or possibly have unknown other impact via a crafted environment, as demonstrated by vectors involving the ForceCommand feature in OpenSSH sshd, the mod_cgi and mod_cgid modules in the Apache HTTP Server, scripts executed by unspecified DHCP clients, and other situations in which setting the environment occurs across a privilege boundary from Bash execution.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-6271.","2014-09-25",0.9994,{"cveId":162,"description":163,"publishedDate":164,"cvssScore":165,"cvssVersion":166,"severity":167,"isKev":18,"epssScore":168},"CVE-2016-9244","A BIG-IP virtual server configured with a Client SSL profile that has the non-default Session Tickets option enabled may leak up to 31 bytes of uninitialized memory. A remote attacker may exploit this vulnerability to obtain Secure Sockets Layer (SSL) session IDs from other sessions. It is possible that other data from uninitialized memory may be returned as well.","2017-02-09",7.5,"v3.0","High",0.74,{"cveId":170,"description":171,"publishedDate":172,"cvssScore":173,"cvssVersion":174,"severity":154,"isKev":18,"epssScore":175},"CVE-2015-3628","The iControl API in F5 BIG-IP LTM, AFM, Analytics, APM, ASM, Link Controller, and PEM 11.3.0 before 11.5.3 HF2 and 11.6.0 before 11.6.0 HF6, BIG-IP AAM 11.4.0 before 11.5.3 HF2 and 11.6.0 before 11.6.0 HF6, BIG-IP Edge Gateway, WebAccelerator, and WOM 11.3.0, BIG-IP GTM 11.3.0 before 11.6.0 HF6, BIG-IP PSM 11.3.0 through 11.4.1, Enterprise Manager 3.1.0 through 3.1.1, BIG-IQ Cloud and Security 4.0.0 through 4.5.0, BIG-IQ Device 4.2.0 through 4.5.0, and BIG-IQ ADC 4.5.0 allows remote authenticated users with the \"Resource Administrator\" role to gain privileges via an iCall (1) script or (2) handler in a SOAP request to iControl\u002FiControlPortal.cgi.","2015-12-07",9,"v2",0.69271,{"cveId":177,"description":178,"publishedDate":179,"cvssScore":180,"cvssVersion":174,"severity":167,"isKev":18,"epssScore":181},"CVE-2014-2928","The iControl API in F5 BIG-IP LTM, APM, ASM, GTM, Link Controller, and PSM 10.0.0 through 10.2.4 and 11.0.0 through 11.5.1, BIG-IP AAM 11.4.0 through 11.5.1, BIG-IP AFM and PEM 11.3.0 through 11.5.1, BIG-IP Analytics 11.0.0 through 11.5.1, BIG-IP Edge Gateway, WebAccelerator, WOM 10.1.0 through 10.2.4 and 11.0.0 through 11.3.0, Enterprise Manager 2.1.0 through 2.3.0 and 3.0.0 through 3.1.1, and BIG-IQ Cloud, Device, and Security 4.0.0 through 4.3.0 allows remote administrators to execute arbitrary commands via shell metacharacters in the hostname element in a SOAP request.","2014-05-12",7.1,0.40053,{"cveId":183,"description":184,"publishedDate":185,"cvssScore":186,"cvssVersion":153,"severity":187,"isKev":4,"epssScore":188},"CVE-2014-0196","The n_tty_write function in drivers\u002Ftty\u002Fn_tty.c in the Linux kernel through 3.14.3 does not properly manage tty driver access in the \"LECHO & !OPOST\" case, which allows local users to cause a denial of service (memory corruption and system crash) or gain privileges by triggering a race condition involving read and write operations with long strings.","2014-05-07",5.5,"Medium",0.22475,{"cveId":190,"description":191,"publishedDate":192,"cvssScore":193,"cvssVersion":174,"severity":187,"isKev":18,"epssScore":194},"CVE-2014-8730","The SSL profiles component in F5 BIG-IP LTM, APM, and ASM 10.0.0 through 10.2.4 and 11.0.0 through 11.5.1, AAM 11.4.0 through 11.5.1, AFM 11.3.0 through 11.5.1, Analytics 11.0.0 through 11.5.1, Edge Gateway, WebAccelerator, and WOM 10.1.0 through 10.2.4 and 11.0.0 through 11.3.0, PEM 11.3.0 through 11.6.0, and PSM 10.0.0 through 10.2.4 and 11.0.0 through 11.4.1 and BIG-IQ Cloud and Security 4.0.0 through 4.4.0 and Device 4.2.0 through 4.4.0, when using TLS 1.x before TLS 1.2, does not properly check CBC padding bytes when terminating connections, which makes it easier for man-in-the-middle attackers to obtain cleartext data via a padding-oracle attack, a variant of CVE-2014-3566 (aka POODLE).  NOTE: the scope of this identifier is limited to the F5 implementation only. Other vulnerable implementations should receive their own CVE ID, since this is not a vulnerability within the design of TLS 1.x itself.","2014-12-10",4.3,0.1372,{"cveId":196,"description":197,"publishedDate":198,"cvssScore":199,"cvssVersion":174,"severity":154,"isKev":18,"epssScore":200},"CVE-2014-2927","The rsync daemon in F5 BIG-IP 11.6 before 11.6.0, 11.5.1 before HF3, 11.5.0 before HF4, 11.4.1 before HF4, 11.4.0 before HF7, 11.3.0 before HF9, and 11.2.1 before HF11 and Enterprise Manager 3.x before 3.1.1 HF2, when configured in failover mode, does not require authentication, which allows remote attackers to read or write to arbitrary files via a cmi request to the ConfigSync IP address.","2014-10-15",9.3,0.0792,{"cveId":202,"description":203,"publishedDate":204,"cvssScore":205,"cvssVersion":174,"severity":167,"isKev":18,"epssScore":206},"CVE-2014-0101","The sctp_sf_do_5_1D_ce function in net\u002Fsctp\u002Fsm_statefuns.c in the Linux kernel through 3.13.6 does not validate certain auth_enable and auth_capable fields before making an sctp_sf_authenticate call, which allows remote attackers to cause a denial of service (NULL pointer dereference and system crash) via an SCTP handshake with a modified INIT chunk and a crafted AUTH chunk before a COOKIE_ECHO chunk.","2014-03-11",7.8,0.07179,{"cveId":208,"description":209,"publishedDate":210,"cvssScore":21,"cvssVersion":174,"severity":187,"isKev":18,"epssScore":211},"CVE-2015-4040","Directory traversal vulnerability in the configuration utility in F5 BIG-IP before 12.0.0 and Enterprise Manager 3.0.0 through 3.1.1 allows remote authenticated users to access arbitrary files in the web root via unspecified vectors.","2015-09-17",0.06756,[213,218,223],{"cveId":183,"description":184,"publishedDate":185,"cvssScore":186,"severity":187,"isKev":4,"epssScore":188,"cisaVulnName":214,"cisaDateAdded":215,"cisaShortDescription":216,"cisaRequiredAction":217},"Linux Kernel Race Condition Vulnerability","2023-05-12","Linux Kernel contains a race condition vulnerability within the n_tty_write function that allows local users to cause a denial-of-service (DoS) or gain privileges via read and write operations with long strings.","The impacted product is end-of-life and should be disconnected if still in use.",{"cveId":149,"description":150,"publishedDate":151,"cvssScore":152,"severity":154,"isKev":4,"epssScore":155,"cisaVulnName":219,"cisaDateAdded":220,"cisaShortDescription":221,"cisaRequiredAction":222},"GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability","2022-01-28","GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to execute code.","Apply updates per vendor instructions.",{"cveId":157,"description":158,"publishedDate":159,"cvssScore":152,"severity":154,"isKev":4,"epssScore":160,"cisaVulnName":219,"cisaDateAdded":220,"cisaShortDescription":224,"cisaRequiredAction":222},"GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to execute code. This CVE correctly remediates the vulnerability in CVE-2014-6271.",{"title":226,"metaDescription":227,"keywords":228,"structuredData":229},"Big-ip Protocol Security Module by F5 - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Big-ip Protocol Security Module by F5 covering 39 versions with 61 tracked vulnerabilities including 2 critical and 0 high-severity issues and 3 CISA KEV vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Big-ip Protocol Security Module vulnerabilities, Big-ip Protocol Security Module security, Big-ip Protocol Security Module CVE, F5 Big-ip Protocol Security Module, Big-ip Protocol Security Module threat intelligence, F5 security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, Big-ip Protocol Security Module KEV, Big-ip Protocol Security Module exploited vulnerabilities",{"@context":230,"@type":231,"name":232,"description":227,"url":233,"manufacturer":234,"applicationCategory":238,"softwareVersion":239,"mainEntity":240},"https:\u002F\u002Fschema.org","SoftwareApplication","Big-ip Protocol Security Module","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Ff5\u002Fbig-ip_protocol_security_module",{"@type":235,"name":236,"url":237},"Organization","F5","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Ff5","Security Software","39 versions tracked",{"@type":241,"name":242,"description":243,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Big-ip Protocol Security Module Security Vulnerabilities","Security vulnerabilities affecting Big-ip Protocol Security Module by F5",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":245,"apiVersion":246},"2026-10-18T18:55:16.636Z","3.0",[],{"rows":249,"total":11,"capped":18,"failed":17},[250,255,261],{"cveId":183,"name":214,"severity":187,"cvss":186,"added":215,"epss":188,"published":251,"ranges":252,"checked":4,"hits":254,"covers":18},"2014-05-07T10:55:04.337",[253],"11.1.0 to 11.4.1",[],{"cveId":149,"name":219,"severity":154,"cvss":152,"added":220,"epss":155,"published":256,"ranges":257,"checked":4,"hits":260,"covers":18},"2014-09-24T18:48:04.477",[258,259],"10.0.0 to 10.2.4","11.0.0 to 11.4.1",[],{"cveId":157,"name":219,"severity":154,"cvss":152,"added":220,"epss":160,"published":262,"ranges":263,"checked":4,"hits":264,"covers":18},"2014-09-25T01:55:04.367",[258,259],[]]