CVE-2007-0188

Severity: medium (CVSS 6.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2007-01-12 · updated 2026-06-16

Description

F5 FirePass 5.4 through 5.5.1 does not properly enforce host access restrictions when a client uses a single integer (dword) representation of an IP address ("dotless IP address"), which allows remote authenticated users to connect to the FirePass administrator console and certain other network resources.

Affected products

F5 Firepass: 5.4, 5.4.1, 5.4.2, 5.4.3, 5.4.4, 5.4.5 (+8)

References

http://lists.grok.org.uk/pipermail/full-disclosure/2007-January/051651.html
http://secunia.com/advisories/23640
http://www.mnin.org/advisories/2007_firepass.pdf
http://www.osvdb.org/32734
http://www.securityfocus.com/bid/21957
https://tech.f5.com/home/solutions/sol6922.html
http://lists.grok.org.uk/pipermail/full-disclosure/2007-January/051651.html
http://secunia.com/advisories/23640
http://www.mnin.org/advisories/2007_firepass.pdf
http://www.osvdb.org/32734
http://www.securityfocus.com/bid/21957
https://tech.f5.com/home/solutions/sol6922.html

Get alerted when CVE-2007-0188 or the next vulnerability affects your stack