CVE-2016-5700

Critical

Published: 03/10/2016(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

Virtual servers in F5 BIG-IP systems in versions 11.5.0, 11.5.1 before HF11, 11.5.2, 11.5.3, 11.5.4 before HF2, 11.6.0 before HF8, 11.6.1 before HF1, 12.0.0 before HF4, and 12.1.0 before HF2, when configured with HTTP Explicit Proxy functionality or SOCKS profile, allow remote attackers to modify system configuration, read system files, and possibly execute arbitrary code via unspecified vectors.

Risk Assessment

This vulnerability poses a serious risk to organizations, allowing remote attackers to gain control over the system, potentially leading to data loss or system compromise.

Recommendation

It is recommended to update F5 BIG-IP systems to the latest versions that include security patches and to review the configuration of HTTP and SOCKS proxies to minimize risk.

Original NVD description (English source)

Virtual servers in F5 BIG-IP systems 11.5.0, 11.5.1 before HF11, 11.5.2, 11.5.3, 11.5.4 before HF2, 11.6.0 before HF8, 11.6.1 before HF1, 12.0.0 before HF4, and 12.1.0 before HF2, when configured with the HTTP Explicit Proxy functionality or SOCKS profile, allow remote attackers to modify the system configuration, read system files, and possibly execute arbitrary code via unspecified vectors.