What’s Vulnerable › Vulnerabilities

CVE-2019-6654

• Severity: medium (CVSS 4.3 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.5% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2019-09-25 · updated 2026-06-17
• Weakness: CWE-20

Description

On versions 14.0.0-14.1.2, 13.0.0-13.1.3, 12.1.0-12.1.5, and 11.5.1-11.6.5, the BIG-IP system fails to perform Martian Address Filtering (As defined in RFC 1812 section 5.3.7) on the control plane (management interface). This may allow attackers on an adjacent system to force BIG-IP into processing packets with spoofed source addresses.

Affected products

• F5 BIG-IP APM: from 11.5.1 through 11.6.5; from 12.1.0 through 12.1.5; from 13.0.0 through 13.1.3; from 14.0.0 through 14.1.2
• BIG-IP: from 11.5.1 through 11.6.5; from 12.1.0 through 12.1.5; from 13.0.0 through 13.1.3; from 14.0.0 through 14.1.2
• F5 Big-Ip Analytics: from 11.5.1 through 11.6.5; from 12.1.0 through 12.1.5; from 13.0.0 through 13.1.3; from 14.0.0 through 14.1.2
• F5 Networks, Inc. BIG-IP (AAM): from 11.5.1 through 11.6.5; from 12.1.0 through 12.1.5; from 13.0.0 through 13.1.3; from 14.0.0 through 14.1.2
• BIG-IP ASM: from 11.5.1 through 11.6.5; from 12.1.0 through 12.1.5; from 13.0.0 through 13.1.3; from 14.0.0 through 14.1.2
• F5 BIG-IP DNS: from 11.5.1 through 11.6.5; from 12.1.0 through 12.1.5; from 13.0.0 through 13.1.3; from 14.0.0 through 14.1.2
• F5 Big-Ip Edge Gateway: from 11.5.1 through 11.6.5; from 12.1.0 through 12.1.5; from 13.0.0 through 13.1.3; from 14.0.0 through 14.1.2
• F5 Big-Ip Fraud Protection Service: from 11.5.1 through 11.6.5; from 12.1.0 through 12.1.5; from 13.0.0 through 13.1.3; from 14.0.0 through 14.1.2
• F5 Big-Ip Global Traffic Manager: from 11.5.1 through 11.6.5; from 12.1.0 through 12.1.5; from 13.0.0 through 13.1.3; from 14.0.0 through 14.1.2
• F5 Big-Ip Link Controller: from 11.5.1 through 11.6.5; from 12.1.0 through 12.1.5; from 13.0.0 through 13.1.3; from 14.0.0 through 14.1.2
• F5 BIG-IP (LTM): from 11.5.1 through 11.6.5; from 12.1.0 through 12.1.5; from 13.0.0 through 13.1.3; from 14.0.0 through 14.1.2
• F5 Networks, Inc. BIG-IP (PEM): from 11.5.1 through 11.6.5; from 12.1.0 through 12.1.5; from 13.0.0 through 13.1.3; from 14.0.0 through 14.1.2
• F5 Big-Ip Webaccelerator: from 11.5.1 through 11.6.5; from 12.1.0 through 12.1.5; from 13.0.0 through 13.1.3; from 14.0.0 through 14.1.2

References

• https://support.f5.com/csp/article/K45644893
• https://support.f5.com/csp/article/K45644893

Get alerted when CVE-2019-6654 or the next vulnerability affects your stack