CVE-2017-6141
CVE-2017-6141
Vexday Risk Score
3Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS —EPSS 1.1%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
20 Oct 2017Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
In F5 BIG-IP LTM, AAM, AFM, APM, ASM, Link Controller, PEM, and WebSafe 12.1.0 through 12.1.2, certain values in a TLS abbreviated handshake when using a client SSL profile with the Session Ticket option enabled may cause disruption of service to the Traffic Management Microkernel (TMM). The Session Ticket option is disabled by default.
Affected products
F5 Networks, Inc. · F5 BIG-IP LTM, AAM, AFM, APM, ASM, Link Controller, PEM, WebSafeWant to know if your infrastructure is exposed to this?
Talk to TrueHacking →