What is CVE-2017-0305?

CVE-2017-0305 is a critical-severity vulnerability in F5 Ssl_intercept_iapp. CVSS score: 9.8/10. Published 2017-04-06.

How severe is CVE-2017-0305?

Critical severity. CVSS v3 base score is 9.8 out of 10.

Vulnerability in F5 Ssl_intercept_iapp

CVE-2017-0305

F5 SSL Intercept iApp version 1.5.0 - 1.5.7 is vulnerable to an unauthenticated, remote attack that may allow modification of the BIG-IP system configuration, extraction of sensitive system files, and possible remote command execution on t…

EPSS: 0.038 (88.8th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 9.8 (Critical). Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.

Affected products

F5 Ssl_intercept_iapp — versions 1.5.0, 1.5.7
F5 Networks Ssl Intercept Iapp Version — versions 1.5.0 - 1.5.7

References

f5sirt@f5.com (x_refsource_CONFIRM, Vendor Advisory)

Frequently asked questions

What is CVE-2017-0305?: CVE-2017-0305 is a critical-severity vulnerability in F5 Ssl_intercept_iapp. CVSS score: 9.8/10. Published 2017-04-06.
How severe is CVE-2017-0305?: Critical severity. CVSS v3 base score is 9.8 out of 10.