CVE-2017-6131
Estado: ModificadaCrítica (9.8)—
In some circumstances, an F5 BIG-IP version 12.0.0 to 12.1.2 and 13.0.0 Azure cloud instance may contain a default administrative password which could be used to remotely log into the BIG-IP system. The impacted administrative account is the Azure instance administrative user that was created at deployment. The root and admin accounts are not vulnerable. An attacker may be able to remotely access the BIG-IP host via SSH.
CVSS
- Versión: 3.0
- Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- Puntuación base: 9.8
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 1.14%
- Percentil entre todas las CVEs puntuadas: 66
- Fecha de la puntuación: 7/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (9)
F5 — Big-ip Access Policy ManagerF5 — Big-ip Advanced Firewall ManagerF5 — Big-ip Application Acceleration ManagerF5 — Big-ip Application Security ManagerF5 — Big-ip Domain Name SystemF5 — Big-ip Link ControllerF5 — Big-ip Local Traffic ManagerF5 — Big-ip Policy Enforcement ManagerF5 — Big-ip Websafe
CWE
- CWE-798
Referencias
JSON original (NVD)
Mostrar
{
"id": "CVE-2017-6131",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 7.5,
"accessVector": "NETWORK",
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
"authentication": "NONE",
"integrityImpact": "PARTIAL",
"accessComplexity": "LOW",
"availabilityImpact": "PARTIAL",
"confidentialityImpact": "PARTIAL"
},
"acInsufInfo": false,
"impactScore": 6.4,
"baseSeverity": "HIGH",
"obtainAllPrivilege": false,
"exploitabilityScore": 10,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
],
"cvssMetricV30": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"scope": "UNCHANGED",
"version": "3.0",
"baseScore": 9.8,
"attackVector": "NETWORK",
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"integrityImpact": "HIGH",
"userInteraction": "NONE",
"attackComplexity": "LOW",
"availabilityImpact": "HIGH",
"privilegesRequired": "NONE",
"confidentialityImpact": "HIGH"
},
"impactScore": 5.9,
"exploitabilityScore": 3.9
}
]
},
"affected": [
{
"source": "f5sirt@f5.com",
"affectedData": [
{
"vendor": "F5 Networks, Inc.",
"product": "BIG-IP Azure cloud instance",
"versions": [
{
"status": "affected",
"version": "12.0.0 to 12.1.2"
},
{
"status": "affected",
"version": "13.0.0"
}
]
}
]
}
],
"published": "2017-05-23T15:29:00.190",
"references": [
{
"url": "http://www.securitytracker.com/id/1038569",
"source": "f5sirt@f5.com"
},
{
"url": "https://support.f5.com/csp/article/K61757346",
"tags": [
"Permissions Required",
"Vendor Advisory"
],
"source": "f5sirt@f5.com"
},
{
"url": "http://www.securitytracker.com/id/1038569",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://support.f5.com/csp/article/K61757346",
"tags": [
"Permissions Required",
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "CWE-798"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "In some circumstances, an F5 BIG-IP version 12.0.0 to 12.1.2 and 13.0.0 Azure cloud instance may contain a default administrative password which could be used to remotely log into the BIG-IP system. The impacted administrative account is the Azure instance administrative user that was created at deployment. The root and admin accounts are not vulnerable. An attacker may be able to remotely access the BIG-IP host via SSH."
},
{
"lang": "es",
"value": "En algunas circunstancias, una instancia de nube de Azure de F5 BIG-IP versiones 12.0.0 hasta 12.1.2 y versión 13.0.0, puede contener una contraseña administrativa por defecto que podría usarse para iniciar sesión de manera remota en el sistema BIG-IP. La cuenta administrativa afectada es el usuario administrativo de instancia Azure que se creó en la implementación. Las cuentas root y administrador no son vulnerables. Un atacante puede acceder de remotamente al host BIG-IP por medio de SSH."
}
],
"lastModified": "2026-06-17T01:21:48.537",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:f5:big-ip_local_traffic_manager:12.0.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "44F1E5E0-BD63-4A4A-BC4E-A1D5495F8B5C"
},
{
"criteria": "cpe:2.3:a:f5:big-ip_local_traffic_manager:12.1.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A82C7B1C-E195-4D94-B604-78FB464C4F81"
},
{
"criteria": "cpe:2.3:a:f5:big-ip_local_traffic_manager:12.1.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8F6C3144-D0DE-4248-BFCD-04A7E6104044"
},
{
"criteria": "cpe:2.3:a:f5:big-ip_local_traffic_manager:12.1.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0357B5ED-0600-4756-93E5-692987068596"
},
{
"criteria": "cpe:2.3:a:f5:big-ip_local_traffic_manager:13.0.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BA7D64DC-7271-4617-BD46-99C8246779CA"
}
],
"operator": "OR"
}
]
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:f5:big-ip_application_acceleration_manager:12.0.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3CA2FA6B-3930-432F-8FB5-E73604CEFE42"
},
{
"criteria": "cpe:2.3:a:f5:big-ip_application_acceleration_manager:12.1.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "ECA90FB8-E2CD-400F-B753-1B482E7FAC96"
},
{
"criteria": "cpe:2.3:a:f5:big-ip_application_acceleration_manager:12.1.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6FEC804B-35DB-4A0C-9AEA-15527E0CC1B1"
},
{
"criteria": "cpe:2.3:a:f5:big-ip_application_acceleration_manager:12.1.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BEB228A9-0C01-4531-B2B2-38BB7B0E02E9"
},
{
"criteria": "cpe:2.3:a:f5:big-ip_application_acceleration_manager:13.0.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3D75D5AD-C20A-4D94-84E0-E695C9D2A26D"
}
],
"operator": "OR"
}
]
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:12.0.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "532AAF54-64EF-4852-B4F1-D5E660463704"
},
{
"criteria": "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:12.1.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BC827031-CA39-4081-8CE0-30EAC78DF756"
},
{
"criteria": "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:12.1.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7569903B-3A15-4A10-863B-6828337DD268"
},
{
"criteria": "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:12.1.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "45825991-D17D-42F1-87B4-7DF86B098B45"
},
{
"criteria": "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:13.0.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8C4E5F36-434B-48E1-9715-4EEC22FB23D1"
}
],
"operator": "OR"
}
]
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:f5:big-ip_access_policy_manager:12.0.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3B62FEC0-EE22-46E6-B811-8AB0EE4C3E2E"
},
{
"criteria": "cpe:2.3:a:f5:big-ip_access_policy_manager:12.1.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FCD2044C-AC6F-4145-B1A0-8EB26DCF1F8C"
},
{
"criteria": "cpe:2.3:a:f5:big-ip_access_policy_manager:12.1.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5FC866D4-CE8C-4408-AD1E-8643AC554CC9"
},
{
"criteria": "cpe:2.3:a:f5:big-ip_access_policy_manager:12.1.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7563D979-BE37-4251-B92E-0DBDBE53F3FF"
},
{
"criteria": "cpe:2.3:a:f5:big-ip_access_policy_manager:13.0.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BCF89E7C-806E-4800-BAA9-0225433B6C56"
}
],
"operator": "OR"
}
]
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:f5:big-ip_application_security_manager:12.0.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "62B0A70A-D101-443E-A543-5EC35E23D66F"
},
{
"criteria": "cpe:2.3:a:f5:big-ip_application_security_manager:12.1.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2DB2118A-0F9C-4273-BB07-85FEA32C785B"
},
{
"criteria": "cpe:2.3:a:f5:big-ip_application_security_manager:12.1.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8541C9EF-69A8-4641-B173-3BCE0EDD20A8"
},
{
"criteria": "cpe:2.3:a:f5:big-ip_application_security_manager:12.1.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E24A3C71-0075-4738-B114-267337D050CD"
},
{
"criteria": "cpe:2.3:a:f5:big-ip_application_security_manager:13.0.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7569977A-E567-4115-B00C-4B0CBA86582E"
}
],
"operator": "OR"
}
]
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:f5:big-ip_domain_name_system:12.0.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "524B2D05-508C-47FF-94A0-6CC42060E638"
},
{
"criteria": "cpe:2.3:a:f5:big-ip_domain_name_system:12.1.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "55DD7394-BD0A-42FD-A367-827F35397A20"
},
{
"criteria": "cpe:2.3:a:f5:big-ip_domain_name_system:12.1.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "98509F74-301A-4D1F-A2B4-B01B80CEFFCA"
},
{
"criteria": "cpe:2.3:a:f5:big-ip_domain_name_system:12.1.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E87FFF5F-5BB1-4E2F-BD15-3BA7C9B26FEA"
},
{
"criteria": "cpe:2.3:a:f5:big-ip_domain_name_system:13.0.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3F2F72B2-84F2-4FA2-9B53-E98344235EB6"
}
],
"operator": "OR"
}
]
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:f5:big-ip_link_controller:12.0.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E90C12AF-44BA-44A2-89ED-0C2497EEC8A6"
},
{
"criteria": "cpe:2.3:a:f5:big-ip_link_controller:12.1.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BBBB6E7C-DA1A-479F-9DD2-DE0C3CA82E92"
},
{
"criteria": "cpe:2.3:a:f5:big-ip_link_controller:12.1.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4913B437-33FF-4B5E-A855-9DA00B35E3B3"
},
{
"criteria": "cpe:2.3:a:f5:big-ip_link_controller:12.1.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EDCFE65B-340B-4F7D-93A1-4390BBC8E67F"
},
{
"criteria": "cpe:2.3:a:f5:big-ip_link_controller:13.0.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E2C4414E-8016-48B5-8CC3-F97FF2D85922"
}
],
"operator": "OR"
}
]
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:12.0.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "23FF9627-E561-4CF7-A685-6E33D2F6C98C"
},
{
"criteria": "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:12.1.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "64273A2C-E5A1-4605-92DD-EBECC7F051D5"
},
{
"criteria": "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:12.1.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E60CA151-1C3A-45B3-B939-E6F80063C595"
},
{
"criteria": "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:12.1.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "58BAD5A9-9C67-4056-9344-07C8C42C8E88"
},
{
"criteria": "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:13.0.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "42821916-E601-4831-B37B-3202ACF2C562"
}
],
"operator": "OR"
}
]
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:f5:big-ip_websafe:12.0.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2EE1EEA6-1E25-4A90-91A1-386D19808557"
},
{
"criteria": "cpe:2.3:a:f5:big-ip_websafe:12.1.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "16A05340-0AE2-49CA-903F-44383421577E"
},
{
"criteria": "cpe:2.3:a:f5:big-ip_websafe:12.1.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "583F134E-1616-44F2-8EF0-0CFA5CCEF0AC"
},
{
"criteria": "cpe:2.3:a:f5:big-ip_websafe:12.1.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "86D0731D-E9DA-4056-9AC6-F204C2F915F7"
},
{
"criteria": "cpe:2.3:a:f5:big-ip_websafe:13.0.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B2E56D76-1A89-46AB-9C17-CB24662FFDE7"
}
],
"operator": "OR"
}
]
}
],
"sourceIdentifier": "f5sirt@f5.com"
}