What’s Vulnerable › Vulnerabilities

CVE-2014-5209

• Severity: medium (CVSS 5.3 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.5% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2020-01-08 · updated 2026-06-17
• Weakness: CWE-200

Description

An Information Disclosure vulnerability exists in NTP 4.2.7p25 private (mode 6/7) messages via a GET_RESTRICT control message, which could let a malicious user obtain sensitive information.

Affected products

• F5 BIG-IP APM: from 10.2.1 through 10.2.4; from 11.4.0 through 11.6.4; from 12.0.0 through 12.1.4; from 13.0.0 through 13.1.1; from 14.0.0 through 14.1.0; 11.2.1, 15.0.0
• BIG-IP: from 11.4.0 through 11.6.4; from 12.0.0 through 12.1.4; from 13.0.0 through 13.1.1; from 14.0.0 through 14.1.0; 15.0.0
• F5 Big-Ip Analytics: from 11.4.0 through 11.6.4; from 12.0.0 through 12.1.4; from 13.0.0 through 13.1.1; from 14.0.0 through 14.1.0; 11.2.1, 15.0.0
• F5 Networks, Inc. BIG-IP (AAM): from 11.4.0 through 11.6.4; from 12.0.0 through 12.1.4; from 13.0.0 through 13.1.1; from 14.0.0 through 14.1.0; 15.0.0
• BIG-IP ASM: from 10.2.1 through 10.2.4; from 11.4.0 through 11.6.4; from 12.0.0 through 12.1.4; from 13.0.0 through 13.1.1; from 14.0.0 through 14.1.0; 11.2.1, 15.0.0
• F5 BIG-IP DNS: from 12.0.0 through 12.1.4; from 13.0.0 through 13.1.1; from 14.0.0 through 14.1.0; 15.0.0
• F5 Big-Ip Edge Gateway: from 10.2.1 through 10.2.4; 11.2.1
• F5 Big-Ip Global Traffic Manager: from 10.2.1 through 10.2.4; from 11.4.0 through 11.6.4; 11.2.1
• F5 Big-Ip Link Controller: from 10.2.1 through 10.2.4; from 11.4.0 through 11.6.4; from 12.0.0 through 12.1.4; from 13.0.0 through 13.1.1; from 14.0.0 through 14.1.0; 11.2.1, 15.0.0
• F5 BIG-IP (LTM): from 10.2.1 through 10.2.4; from 11.4.0 through 11.6.4; from 12.0.0 through 12.1.4; from 13.0.0 through 13.1.1; from 14.0.0 through 14.1.0; 11.2.1, 15.0.0
• F5 Networks, Inc. BIG-IP (PEM): from 11.4.0 through 11.6.4; from 12.0.0 through 12.1.4; from 13.0.0 through 13.1.1; from 14.0.0 through 14.1.0; 15.0.0
• F5 Big-Ip Protocol Security Module: from 10.2.1 through 10.2.4; from 11.4.0 through 11.4.1
• F5 Big-Ip Wan Optimization Manager: from 10.2.1 through 10.2.4; 11.2.1
• F5 Big-Ip Webaccelerator: from 10.2.1 through 10.2.4; 11.2.1
• F5 Big-Iq Adc: 4.5.0
• F5 BIG-IQ: from 5.0.0 through 5.4.0; from 6.0.0 through 6.1.0; 4.6.0
• F5 Big-Iq Cloud: from 4.0.0 through 4.5.0
• F5 Networks, Inc. BIG-IQ Cloud and Orchestration: 1.0.0
• F5 Big-Iq Device: from 4.2.0 through 4.5.0
• F5 Big-Iq Security: from 4.0.0 through 4.5.0
• F5 Networks, Inc. Enterprise Manager: 3.1.1
• F5 Networks, Inc. iWorkflow: from 2.0.0 through 2.3.0
• F5 Mobilesafe: 1.0.0
• F5 Websafe: 1.0.0
• NTP: 4.2.7-p25

References

• https://exchange.xforce.ibmcloud.com/vulnerabilities/95841
• https://support.f5.com/csp/article/K44942017
• https://support.f5.com/csp/article/K44942017
• https://support.f5.com/csp/article/K44942017
• https://support.f5.com/csp/article/K44942017
• https://support.f5.com/csp/article/K44942017?utm_source=f5support&amp%3Butm_medium=RSS
• https://exchange.xforce.ibmcloud.com/vulnerabilities/95841
• https://support.f5.com/csp/article/K44942017
• https://support.f5.com/csp/article/K44942017
• https://support.f5.com/csp/article/K44942017
• https://support.f5.com/csp/article/K44942017
• https://support.f5.com/csp/article/K44942017?utm_source=f5support&amp%3Butm_medium=RSS

Get alerted when CVE-2014-5209 or the next vulnerability affects your stack