CVE-2016-5745

Severity: critical (CVSS 9.8 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 4.8% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2016-10-05 · updated 2026-06-17
Weakness: CWE-284

Description

F5 BIG-IP LTM systems 11.x before 11.2.1 HF16, 11.3.x, 11.4.x before 11.4.1 HF11, 11.5.0, 11.5.1 before HF11, 11.5.2, 11.5.3, 11.5.4 before HF2, 11.6.0 before HF8, 11.6.1 before HF1, 12.0.0 before HF4, and 12.1.0 before HF2 allow remote attackers to modify or extract system configuration files via vectors involving NAT64.

Affected products

F5 BIG-IP (LTM): 11.0.0, 11.1.0, 11.2.0, 11.2.1, 11.3.0, 11.4.0 (+10)

References

http://www.securityfocus.com/bid/94240
http://www.securitytracker.com/id/1036927
https://support.f5.com/kb/en-us/solutions/public/k/64/sol64743453.html
http://www.securityfocus.com/bid/94240
http://www.securitytracker.com/id/1036927
https://support.f5.com/kb/en-us/solutions/public/k/64/sol64743453.html

Get alerted when CVE-2016-5745 or the next vulnerability affects your stack