UpHeron
All vulnerabilities

Servers and applications

CVE-2016-2084

F5 BIG-IP LTM, AFM, Analytics, APM, ASM, Link Controller, and PEM 11.3.x, 11.4.x before 11.4.1 build 685-HF10, 11.5.1 before build 10.104.180, 11.5.2 before 11.5.4 build 0.1.256, 11.6.0 before build 6.204.442, and 12.0.0 before build 1.14.628; BIG-IP AAM 11.4.x before 11.4.1 build 685-HF10, 11.5.1 before build 10.104.180, 11.5.2 before 11.5.4 build 0.1.256, 11.6.0 before build 6.204.442, and…

Severity
High 7.4
Published
13 Apr 2016
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Exploit chance
0.8% in the next 30 daysHigher than 56% of CVEs. EPSS by FIRST, 11 Nov 2026
Weakness
Information exposure (CWE-200)
Attack
Over the network · Only under certain conditions · No login needed · No user action needed
Attacker can
Read data · Take it down
CVSS vector
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H
Sources
NVD

Description

F5 BIG-IP LTM, AFM, Analytics, APM, ASM, Link Controller, and PEM 11.3.x, 11.4.x before 11.4.1 build 685-HF10, 11.5.1 before build 10.104.180, 11.5.2 before 11.5.4 build 0.1.256, 11.6.0 before build 6.204.442, and 12.0.0 before build 1.14.628; BIG-IP AAM 11.4.x before 11.4.1 build 685-HF10, 11.5.1 before build 10.104.180, 11.5.2 before 11.5.4 build 0.1.256, 11.6.0 before build 6.204.442, and 12.0.0 before build 1.14.628; BIG-IP DNS 12.0.0 before build 1.14.628; BIG-IP Edge Gateway, WebAccelerator, and WOM 11.3.0; BIG-IP GTM 11.3.x, 11.4.x before 11.4.1 build 685-HF10, 11.5.1 before build 10.104.180, 11.5.2 before 11.5.4 build 0.1.256, and 11.6.0 before build 6.204.442; BIG-IP PSM 11.3.x and 11.4.x before 11.4.1 build 685-HF10; BIG-IQ Cloud, Device, and Security 4.2.0 through 4.5.0; and BIG-IQ ADC 4.5.0 do not properly regenerate certificates and keys when deploying cloud images in Amazon Web Services (AWS), Azure or Verizon cloud services environments, which allows attackers to…

From NVD. Shortened; the full text is there.

Affected software

SoftwareAffected versions
F5 BIG-IPServers and applications · cpe:a:f5:big-ip_access_policy_manager
  • Version 12.0.0
  • Version 11.6.0
  • Version 11.5.4
  • Version 11.5.3
All 10 release lines
  • Version 11.3.0
  • Version 11.4.0
  • Version 11.4.1
  • Version 11.5.0
  • Version 11.5.1
  • Version 11.5.2
  • Version 11.5.3
  • Version 11.5.4
  • Version 11.6.0
  • Version 12.0.0
F5 BIG-IPServers and applications · cpe:a:f5:big-ip_local_traffic_manager
  • Version 12.0.0
  • Version 11.6.0
  • Version 11.5.4
  • Version 11.5.3
All 10 release lines
  • Version 11.3.0
  • Version 11.4.0
  • Version 11.4.1
  • Version 11.5.0
  • Version 11.5.1
  • Version 11.5.2
  • Version 11.5.3
  • Version 11.5.4
  • Version 11.6.0
  • Version 12.0.0

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2016-2084
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2016-2084