Forum Discussion

Kuldeep22's avatar
Kuldeep22
Icon for Altostratus rankAltostratus
Apr 23, 2024

vulnerabilities (CVE-2020-36363), CVE-2016-0736,CVE-2019-6593-FOR VERSION BIGIP LTM-16.1.4

Kindly guide me these vulnerabilities (CVE-2020-36363), (CVE-2016-0736), (CVE-2019-6593) -FOR VERSION BIGIP LTM-16.1. 4 are applicable or not.

Thank you

application delivery
LTM
LTM VE
  • Jmtaylor's avatar
    Jmtaylor
    Icon for Moderator rankModerator
    Apr 23, 2024

    Hello Kuldeep22  Please see below the information that was found for your inquiry 

     

     

    1. CVE-2020-36363 : 

      This vulnerability is related to amazon AWS CloudFront TLSv1.2_2019 which allows TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256 and TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384, which some entities consider to be weak ciphers.

      This is not related to F5 products. 

      2. CVE-2016-0736 : 

      F5 products are not affected by this vulnerability. Please refer the below article.

      K53437580: Apache vulnerabilities CVE-2016-0736 and CVE-2016-2161
      https://my.f5.com/manage/s/article/K53437580


      3. CVE-2019-6593 : 

      Currently your BIG IP is running on version 16.1.4 and this vulnerability is not affected to your BIG IP version.  Kindly go through the below article. 

      K10065173: TMM TLS virtual server vulnerability CVE-2019-6593
      https://my.f5.com/manage/s/article/K10065173