UpHeron
All vulnerabilities

Servers and applications

CVE-2017-6161

In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, GTM, Link Controller, PEM, WebAccelerator software version 12.0.0 - 12.1.2, 11.6.0 - 11.6.1, 11.4.0 - 11.5.4, 11.2.1, when ConfigSync is configured, attackers on adjacent networks may be able to bypass the TLS protections usually used to encrypted and authenticate connections to mcpd. This vulnerability may allow remote…

Severity
Medium 5.3
Published
27 Oct 2017
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Exploit chance
1% in the next 30 daysHigher than 62% of CVEs. EPSS by FIRST, 11 Nov 2026
Sources
NVD

Affected software

SoftwareAffected versions
F5 BIG-IPServers and applications · cpe:a:f5:big-ip_access_policy_manager
  • Version 12.1.2
  • Version 12.1.1
  • Version 12.1.0
  • Version 12.0.0
All 8 release lines
  • Version 11.2.1
  • From 11.5.0 up to 11.5.4
  • Version 11.6.0
  • Version 11.6.1
  • Version 12.0.0
  • Version 12.1.0
  • Version 12.1.1
  • Version 12.1.2
F5 BIG-IPServers and applications · cpe:a:f5:big-ip_local_traffic_manager
  • Version 12.1.2
  • Version 12.1.1
  • Version 12.1.0
  • Version 12.0.0
All 8 release lines
  • Version 11.2.1
  • From 11.5.0 up to 11.5.4
  • Version 11.6.0
  • Version 11.6.1
  • Version 12.0.0
  • Version 12.1.0
  • Version 12.1.1
  • Version 12.1.2

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2017-6161
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2017-6161