Strix
26.1K

CVE-2012-1493

UnknownEPSS 63.08%

Last modified

CVE-2012-1493 is a vulnerability of currently unknown severity. F5 BIG-IP appliances 9.x before 9.4.8-HF5, 10.x before 10.2.4, 11.0.x before 11.0.0-HF2, and 11.1.x before 11.1.0-HF3, and Enterprise Manager before 2.1.0-HF2, 2.2.x before 2.2.0-HF1, and 2.3.x before 2.3.0-HF3, use a single SSH private key across different customers' installations and do not properly restrict access to this key, which makes it easier for remote attackers to perform SSH logins via the PubkeyAuthentication option.. EPSS estimates a 63.08% chance of exploitation in the next 30 days.

Description

F5 BIG-IP appliances 9.x before 9.4.8-HF5, 10.x before 10.2.4, 11.0.x before 11.0.0-HF2, and 11.1.x before 11.1.0-HF3, and Enterprise Manager before 2.1.0-HF2, 2.2.x before 2.2.0-HF1, and 2.3.x before 2.3.0-HF3, use a single SSH private key across different customers' installations and do not properly restrict access to this key, which makes it easier for remote attackers to perform SSH logins via the PubkeyAuthentication option.

Metrics

EPSS Probability
63.08%

99.1th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

Affected Software

VendorProductVersionsUpdate
F5Big-Ip Application Security Manager9.2.0—
F5Big-Ip Application Security Manager9.4.4—
F5Big-Ip Application Security Manager9.4.5—
F5Big-Ip Application Security Manager9.4.6—
F5Big-Ip Application Security Manager9.4.7—
F5Big-Ip Application Security Manager9.4.8—
F5Big-Ip Application Security Manager10.0.0—
F5Big-Ip Application Security Manager10.0.1—
F5Big-Ip Application Security Manager10.2.3Hf1
F5Big-Ip Application Security Manager11.0.0—
F5Big-Ip Application Security Manager11.1.0—
F5Big-Ip Global Traffic ManagerAll versions—
F5Big-Ip Global Traffic Manager9.2.2—
F5Big-Ip Global Traffic Manager9.4.8Hf4
F5Big-Ip Global Traffic Manager10.0.0—
F5Big-Ip Global Traffic Manager10.2.3Hf1
F5Big-Ip Global Traffic Manager11.0.0—
F5Big-Ip Global Traffic Manager11.1.0—
F5Big-Ip Local Traffic ManagerAll versions—
F5Big-Ip Local Traffic Manager9.0.0—
F5Big-Ip Local Traffic Manager9.4.8Hf4
F5Big-Ip Local Traffic Manager10.0.0—
F5Big-Ip Local Traffic Manager10.2.3Hf1
F5Big-Ip Local Traffic Manager11.0.0—
F5Big-Ip Local Traffic Manager11.1.0—
F5TmosAll versions—
F5Tmos2.0—
F5Tmos4.0—
F5Tmos4.2—
F5Tmos4.3—
F5Tmos4.4—
F5Tmos4.5—
F5Tmos4.5.6—
F5Tmos4.5.9—
F5Tmos4.5.10—
F5Tmos4.5.11—
F5Tmos4.5.12—
F5Tmos4.6—
F5Tmos4.6.2—
F5Tmos9.0—
F5Tmos9.0.1—
F5Tmos9.0.2—
F5Tmos9.0.3—
F5Tmos9.0.4—
F5Tmos9.0.5—
F5Tmos9.1—
F5Tmos9.1.1—
F5Tmos9.1.2—
F5Tmos9.1.3—
F5Tmos9.2—

Showing 50 of 97 affected configurations. See NVD for the full list.

References

Timeline

Published
Last Modified
Status
Modified

Frequently Asked Questions

What is CVE-2012-1493?
F5 BIG-IP appliances 9.x before 9.4.8-HF5, 10.x before 10.2.4, 11.0.x before 11.0.0-HF2, and 11.1.x before 11.1.0-HF3, and Enterprise Manager before 2.1.0-HF2, 2.2.x before 2.2.0-HF1, and 2.3.x before 2.3.0-HF3, use a single SSH private key across different customers' installations and do not properly restrict access to this key, which makes it easier for remote attackers to perform SSH logins via the PubkeyAuthentication option.
How severe is CVE-2012-1493?
Severity scoring for CVE-2012-1493 is pending analysis. The EPSS model estimates a 63.08% probability of exploitation in the next 30 days.
How do I fix CVE-2012-1493?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2012-1493?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST