Unscored severity · published Nov 1, 2014
CVE-2014-6032
Multiple XML External Entity (XXE) vulnerabilities in the Configuration utility in F5 BIG-IP LTM, ASM, GTM, and Link Controller 11.0 through 11.6.0 and 10.0.0 through 10.2.4, AAM…
–
CVSS
2.9%
EPSS
No
On KEV
Description
Multiple XML External Entity (XXE) vulnerabilities in the Configuration utility in F5 BIG-IP LTM, ASM, GTM, and Link Controller 11.0 through 11.6.0 and 10.0.0 through 10.2.4, AAM 11.4.0 through 11.6.0, ARM 11.3.0 through 11.6.0, Analytics 11.0.0 through 11.6.0, APM and Edge Gateway 11.0.0 through 11.6.0 and 10.1.0 through 10.2.4, PEM 11.3.0 through 11.6.0, PSM 11.0.0 through 11.4.1 and 10.0.0 through 10.2.4, and WOM 11.0.0 through 11.3.0 and 10.0.0 through 10.2.4 and Enterprise Manager 3.0.0 through 3.1.1 and 2.1.0 through 2.3.0 allow remote authenticated users to read arbitrary files and cause a denial of service via a crafted request, as demonstrated using (1) viewList or (2) deal elements.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.9% · higher than 87% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
BA
Big-ip Advanced Firewall Manager · F5
11.3.0; 11.4.0; 11.4.1; 11.5.0; 11.5.1; 11.6.0 · source: NVD
BA
Big-ip Analytics · F5
11.0.0; 11.1.0; 11.2.0; 11.2.1; 11.3.0; 11.4.0; +4 more · source: NVD
BA
Big-ip Application Acceleration Manager · F5
11.4.0; 11.4.1; 11.5.0; 11.5.1; 11.6.0 · source: NVD
BA
Big-ip Application Security Manager · F5
10.0.0; 10.1.0; 10.2.0; 10.2.1; 10.2.2; 10.2.3; +28 more · source: NVD
BE
Big-ip Edge Gateway · F5
10.1.0; 10.2.0; 10.2.1; 10.2.2; 10.2.3; 10.2.4; +5 more · source: NVD
BG
Big-ip Global Traffic Manager · F5
10.0.0; 10.1.0; 10.2.0; 10.2.1; 10.2.2; 10.2.3; +11 more · source: NVD
BL
Big-ip Link Controller · F5
10.0.0; 10.1.0; 10.2.0; 10.2.1; 10.2.2; 10.2.3; +11 more · source: NVD
BL
Big-ip Local Traffic Manager · F5
10.0.0; 10.1.0; 10.2.0; 10.2.1; 10.2.2; 10.2.3; +11 more · source: NVD
BP
Big-ip Policy Enforcement Manager · F5
11.3.0; 11.4.0; 11.4.1; 11.5.0; 11.5.1; 11.6.0 · source: NVD
BP
Big-ip Protocol Security Module · F5
10.0.0; 10.1.0; 10.2.0; 10.2.1; 10.2.2; 10.2.3; +8 more · source: NVD
BW
Big-ip Wan Optimization Manager · F5
10.0.0; 10.1.0; 10.2.0; 10.2.1; 10.2.2; 10.2.3; +6 more · source: NVD
BW
Big-ip Webaccelerator · F5
10.0.0; 10.1.0; 10.2.0; 10.2.1; 10.2.2; 10.2.3; +6 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2014-6032
CVE.org
https://www.cve.org/CVERecord?id=CVE-2014-6032
Exploit
http://packetstormsecurity.com/files/128915/F5-Big-IP-11.3.0.39.0-XML-External-Entity-Injection-1.html
seclists.org
http://seclists.org/fulldisclosure/2014/Oct/128
seclists.org
http://seclists.org/fulldisclosure/2014/Oct/129
seclists.org
http://seclists.org/fulldisclosure/2014/Oct/130
Exploit
http://www.securityfocus.com/bid/70834
www.securitytracker.com
http://www.securitytracker.com/id/1031144
More from Big-ip Advanced Firewall Manager
9.8
CVE-2023-46747
BIG-IP Configuration utility unauthenticated remote code execution vulnerability
9.8
CVE-2022-1388
F5 BIG-IP Missing Authentication Vulnerability
9.8
CVE-2021-22991
F5 BIG-IP Traffic Management Microkernel Buffer Overflow
9.8
CVE-2021-22986
F5 BIG-IP and BIG-IQ Centralized Management iControl REST Remote Code Execution Vulnerability
9.8
CVE-2020-5902
F5 BIG-IP Traffic Management User Interface (TMUI) Remote Code Execution Vulnerability