UpHeron
All vulnerabilities

Servers and applications

CVE-2019-6644

Similar to the issue identified in CVE-2018-12120, on versions 14.1.0-14.1.0.5, 14.0.0-14.0.0.4, 13.0.0-13.1.2, and 12.1.0-12.1.4 BIG-IP will bind a debug nodejs process to all interfaces when invoked. This may expose the process to unauthorized users if the plugin is left in debug mode and the port is accessible.

Severity
Critical 9.4
Published
4 Sept 2019
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Exploit chance
1.4% in the next 30 daysHigher than 72% of CVEs. EPSS by FIRST, 10 Nov 2026
Sources
NVD

Affected software

SoftwareAffected versions
F5 BIG-IPServers and applications · cpe:a:f5:big-ip_access_policy_manager
  • From 12.1.3 up to 12.1.4
  • From 13.0.0 up to 13.1.2
  • Version 14.0.0
  • Version 14.1.0
F5 BIG-IPServers and applications · cpe:a:f5:big-ip_local_traffic_manager
  • From 12.1.3 up to 12.1.4
  • From 13.0.0 up to 13.1.2
  • Version 14.0.0
  • Version 14.1.0

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2019-6644
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2019-6644