F5 Product Security Update Advisory (CVE-2024-45844)
Overview
An update has been released to address vulnerabilities in F5 Products. Users of the affected versions are advised to update to the latest version.
Affected Products
CVE-2024-45844
- BIG-IP (all modules) versions: 17.1.0 (inclusive) ~ 17.1.1 (inclusive)
- BIG-IP (all modules) versions: 16.1.0 (inclusive) ~ 16.1.4 (inclusive)
- BIG-IP (all modules) versions: 15.1.0 (inclusive) ~ 15.1.10 (inclusive)
Resolved Vulnerabilities
The BIG-IP Monitor feature could allow attackers to bypass access control restrictions regardless of port lock settings (CVE-2024-45844)
Vulnerability Patches
Vulnerability patches have been made available in the latest update. Please follow the instructions on the Referenced Sites to update to the latest Vulnerability Patches version.
CVE-2024-45844
- BIG-IP (all modules) version: 17.1.1.4
- BIG-IP (all modules) version: 16.1.5
- BIG-IP (all modules) version: 15.1.10.5
Referenced Sites
[1] CVE-2024-45844 Detail
https://nvd.nist.gov/vuln/detail/CVE-2024-45844
[2] K000140061: BIG-IP monitors vulnerability CVE-2024-45844