CVE-2021-23000

On BIG-IP versions 13.1.3.4-13.1.3.6 and 12.1.5.2, if the tmm.http.rfc.enforcement BigDB key is enabled in a BIG-IP system, or the Bad host header value is checked in the AFM HTTP security profile associated with a virtual server, in rare instances, a specific sequence of malicious requests may cause TMM to restart. Note: Software versions which have reached End of Software Development (EoSD) are not evaluated.

CVSS v3 7.5 HIGH
CVSS v2.0 4.3 MEDIUM

7.5^/10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

4.3^/10

CVSS v2.0 : MEDIUM

V2 Legend

Vector : AV:N/AC:M/Au:N/C:N/I:N/A:P

Exploitability : 8.6 / Impact : 2.9

Access Vector NETWORK

Access Complexity MEDIUM

Authentication NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact PARTIAL

References

Link	Resource
https://support.f5.com/csp/article/K34441555	Vendor Advisory
https://support.f5.com/csp/article/K34441555	Vendor Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:f5:big-ip_access_policy_manager::::::::
	cpe:2.3:a:f5:big-ip_access_policy_manager:12.1.5.2:::::::*
	cpe:2.3:a:f5:big-ip_advanced_firewall_manager::::::::
	cpe:2.3:a:f5:big-ip_advanced_firewall_manager:12.1.5.2:::::::*
	cpe:2.3:a:f5:big-ip_advanced_web_application_firewall::::::::
	cpe:2.3:a:f5:big-ip_advanced_web_application_firewall:12.1.5.2:::::::*
	cpe:2.3:a:f5:big-ip_analytics::::::::
	cpe:2.3:a:f5:big-ip_analytics:12.1.5.2:::::::*
	cpe:2.3:a:f5:big-ip_application_acceleration_manager::::::::
	cpe:2.3:a:f5:big-ip_application_acceleration_manager:12.1.5.2:::::::*
	cpe:2.3:a:f5:big-ip_application_security_manager::::::::
	cpe:2.3:a:f5:big-ip_application_security_manager:12.1.5.2:::::::*
	cpe:2.3:a:f5:big-ip_ddos_hybrid_defender::::::::
	cpe:2.3:a:f5:big-ip_ddos_hybrid_defender:12.1.5.2:::::::*
	cpe:2.3:a:f5:big-ip_domain_name_system::::::::
	cpe:2.3:a:f5:big-ip_domain_name_system:12.1.5.2:::::::*
	cpe:2.3:a:f5:big-ip_fraud_protection_service::::::::
	cpe:2.3:a:f5:big-ip_fraud_protection_service:12.1.5.2:::::::*
	cpe:2.3:a:f5:big-ip_global_traffic_manager::::::::
	cpe:2.3:a:f5:big-ip_global_traffic_manager:12.1.5.2:::::::*
	cpe:2.3:a:f5:big-ip_link_controller::::::::
	cpe:2.3:a:f5:big-ip_link_controller:12.1.5.2:::::::*
	cpe:2.3:a:f5:big-ip_local_traffic_manager::::::::
	cpe:2.3:a:f5:big-ip_local_traffic_manager:12.1.5.2:::::::*
	cpe:2.3:a:f5:big-ip_policy_enforcement_manager::::::::
	cpe:2.3:a:f5:big-ip_policy_enforcement_manager:12.1.5.2:::::::*
	cpe:2.3:a:f5:ssl_orchestrator::::::::
	cpe:2.3:a:f5:ssl_orchestrator:12.1.5.2:::::::*

History

21 Nov 2024, 05:51

Type	Values Removed	Values Added
References	~~() https://support.f5.com/csp/article/K34441555 - Vendor Advisory~~	() https://support.f5.com/csp/article/K34441555 - Vendor Advisory

Information

Published : 2021-03-31 18:15

Updated : 2024-11-21 05:51

NVD link : CVE-2021-23000

Mitre link : CVE-2021-23000

CVE.ORG link : CVE-2021-23000

JSON object : View

Products Affected

big-ip_access_policy_manager
big-ip_fraud_protection_service
big-ip_policy_enforcement_manager
big-ip_application_security_manager
ssl_orchestrator
big-ip_analytics
big-ip_advanced_firewall_manager
big-ip_advanced_web_application_firewall
big-ip_link_controller
big-ip_local_traffic_manager
big-ip_ddos_hybrid_defender
big-ip_application_acceleration_manager
big-ip_global_traffic_manager
big-ip_domain_name_system

CWE

NVD-CWE-noinfo

{"id": "CVE-2021-23000", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 4.3, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "MEDIUM", "availabilityImpact": "PARTIAL", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 8.6, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 3.9}]}, "published": "2021-03-31T18:15:15.223", "references": [{"url": "https://support.f5.com/csp/article/K34441555", "tags": ["Vendor Advisory"], "source": "f5sirt@f5.com"}, {"url": "https://support.f5.com/csp/article/K34441555", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-noinfo"}]}], "descriptions": [{"lang": "en", "value": "On BIG-IP versions 13.1.3.4-13.1.3.6 and 12.1.5.2, if the tmm.http.rfc.enforcement BigDB key is enabled in a BIG-IP system, or the Bad host header value is checked in the AFM HTTP security profile associated with a virtual server, in rare instances, a specific sequence of malicious requests may cause TMM to restart. Note: Software versions which have reached End of Software Development (EoSD) are not evaluated."}, {"lang": "es", "value": "En BIG-IP versiones 13.1.3.4-13.1.3.6 y 12.1.5.2, si la clave de BigDB tmm.http.rfc.enforcement est\u00e1 habilitada en un sistema BIG-IP, o si el valor del encabezado de host Bad est\u00e1 validado en la seguridad HTTP de AFM asociado con un servidor virtual, en raras ocasiones, una secuencia espec\u00edfica de peticiones maliciosas puede hacer que TMM se reinicie. Nota: No se eval\u00faan las versiones de software que han alcanzado End of Software Development (EoSD)."}], "lastModified": "2024-11-21T05:51:07.640", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0653389C-2FEB-4D87-8676-F996DDF96F9B", "versionEndExcluding": "13.1.3.6", "versionStartIncluding": "13.1.3.4"}, {"criteria": "cpe:2.3:a:f5:big-ip_access_policy_manager:12.1.5.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "306CEBB8-05D0-4FD3-96F7-8C48FD6530A3"}, {"criteria": "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "EB013399-9106-4161-A32F-5A4E3460EC34", "versionEndExcluding": "13.1.3.6", "versionStartIncluding": "13.1.3.4"}, {"criteria": "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:12.1.5.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0E7059A1-E7AA-43FA-A209-9DDACE6EC169"}, {"criteria": "cpe:2.3:a:f5:big-ip_advanced_web_application_firewall:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5EAEAA05-C796-48F7-B0FA-41FDFE075650", "versionEndExcluding": "13.1.3.6", "versionStartIncluding": "13.1.3.4"}, {"criteria": "cpe:2.3:a:f5:big-ip_advanced_web_application_firewall:12.1.5.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "25F39931-3100-454E-824D-F20525F913AF"}, {"criteria": "cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4704D724-D27E-4F5C-9762-E4B100460891", "versionEndExcluding": "13.1.3.6", "versionStartIncluding": "13.1.3.4"}, {"criteria": "cpe:2.3:a:f5:big-ip_analytics:12.1.5.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "87F22480-54E4-430E-A3A3-DEE2A5F0BF40"}, {"criteria": "cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E6410FB0-0508-4A1F-B5E1-07FCA68A8125", "versionEndExcluding": "13.1.3.6", "versionStartIncluding": "13.1.3.4"}, {"criteria": "cpe:2.3:a:f5:big-ip_application_acceleration_manager:12.1.5.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C8EED92E-1030-4AB4-B968-A7F22E75D982"}, {"criteria": "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "24E2B6EA-1EB2-4DEE-8D0A-C6598A6AA8F8", "versionEndExcluding": "13.1.3.6", "versionStartIncluding": "13.1.3.4"}, {"criteria": "cpe:2.3:a:f5:big-ip_application_security_manager:12.1.5.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F962E586-1232-4DA3-ABBB-0384E506E94D"}, {"criteria": "cpe:2.3:a:f5:big-ip_ddos_hybrid_defender:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "66BC3C55-0397-4D00-BBEC-3D8A8856152E", "versionEndExcluding": "13.1.3.6", "versionStartIncluding": "13.1.3.4"}, {"criteria": "cpe:2.3:a:f5:big-ip_ddos_hybrid_defender:12.1.5.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2E2A9103-599A-4346-9955-1E6F1F9D7FFB"}, {"criteria": "cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7C884AFB-63A6-4C6C-90B0-C56A088F4DF3", "versionEndExcluding": "13.1.3.6", "versionStartIncluding": "13.1.3.4"}, {"criteria": "cpe:2.3:a:f5:big-ip_domain_name_system:12.1.5.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A7D85A60-A381-474C-9716-68D7B8D0C04B"}, {"criteria": "cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3C01EF28-1BF8-4AF9-92B5-72DDC579E16C", "versionEndExcluding": "13.1.3.6", "versionStartIncluding": "13.1.3.4"}, {"criteria": "cpe:2.3:a:f5:big-ip_fraud_protection_service:12.1.5.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "DA4D2F7C-11D7-4CC3-A0FB-CCB9605D5701"}, {"criteria": "cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "294B3405-8CC0-48D8-870F-30AE84D7A753", "versionEndExcluding": "13.1.3.6", "versionStartIncluding": "13.1.3.4"}, {"criteria": "cpe:2.3:a:f5:big-ip_global_traffic_manager:12.1.5.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E792C2FB-1D47-4C01-8F60-B1F78BA77B6F"}, {"criteria": "cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "ECE22F5F-0AE3-4CEC-9C1E-807D07574629", "versionEndExcluding": "13.1.3.6", "versionStartIncluding": "13.1.3.4"}, {"criteria": "cpe:2.3:a:f5:big-ip_link_controller:12.1.5.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3D6CAB31-2845-4500-8ED4-6CA403D39549"}, {"criteria": "cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1984FE46-80A9-4B34-ABED-7B6A2E536555", "versionEndExcluding": "13.1.3.6", "versionStartIncluding": "13.1.3.4"}, {"criteria": "cpe:2.3:a:f5:big-ip_local_traffic_manager:12.1.5.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "07BAF7BB-8EED-4EA3-8E5E-38361FFABCF2"}, {"criteria": "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "79E0719A-0568-4B57-AD43-B70F706B294A", "versionEndExcluding": "13.1.3.6", "versionStartIncluding": "13.1.3.4"}, {"criteria": "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:12.1.5.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6C3F3067-14FF-4AA1-9A9D-FD0BDCB929FC"}, {"criteria": "cpe:2.3:a:f5:ssl_orchestrator:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "781AF4EF-1448-4BF4-B7CA-71E84AAE0D6E", "versionEndExcluding": "13.1.3.6", "versionStartIncluding": "13.1.3.4"}, {"criteria": "cpe:2.3:a:f5:ssl_orchestrator:12.1.5.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3A96D133-AB13-43B6-A1D1-1B7E69D8A989"}], "operator": "OR"}]}], "sourceIdentifier": "f5sirt@f5.com"}

7.5 /10

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

4.3 /10

Access Vector NETWORK

Access Complexity MEDIUM

Authentication NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact PARTIAL

JSON object

Attach tags to CVE-2021-23000

7.5^/10

4.3^/10

Attach tags to `CVE-2021-23000`