For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Kuldeep22's avatar
Kuldeep22
Icon for Altostratus rankAltostratus
Apr 23, 2024

vulnerabilities (CVE-2020-36363), CVE-2016-0736,CVE-2019-6593-FOR VERSION BIGIP LTM-16.1.4

Kindly guide me these vulnerabilities (CVE-2020-36363), (CVE-2016-0736), (CVE-2019-6593) -FOR VERSION BIGIP LTM-16.1. 4 are applicable or not.

Thank you

application delivery
LTM
LTM VE

1 Reply

  • Jmtaylor's avatar
    Jmtaylor
    Icon for Moderator rankModerator
    Apr 23, 2024

    Hello Kuldeep22  Please see below the information that was found for your inquiry 

     

     

    1. CVE-2020-36363 : 

      This vulnerability is related to amazon AWS CloudFront TLSv1.2_2019 which allows TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256 and TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384, which some entities consider to be weak ciphers.

      This is not related to F5 products. 

      2. CVE-2016-0736 : 

      F5 products are not affected by this vulnerability. Please refer the below article.

      K53437580: Apache vulnerabilities CVE-2016-0736 and CVE-2016-2161
      https://my.f5.com/manage/s/article/K53437580


      3. CVE-2019-6593 : 

      Currently your BIG IP is running on version 16.1.4 and this vulnerability is not affected to your BIG IP version.  Kindly go through the below article. 

      K10065173: TMM TLS virtual server vulnerability CVE-2019-6593
      https://my.f5.com/manage/s/article/K10065173