CVE-2019-6663 : Security Advisory and Response

The configuration utility of BIG-IP, BIG-IQ, iWorkflow, and Enterprise Manager is vulnerable to an Anti DNS Pinning (DNS Rebinding) attack.

Understanding CVE-2019-6663

This CVE identifies a security vulnerability in F5's BIG-IP, BIG-IQ, iWorkflow, and Enterprise Manager products.

What is CVE-2019-6663?

The vulnerability allows for an Anti DNS Pinning (DNS Rebinding) attack, potentially compromising the security of the affected systems.

The Impact of CVE-2019-6663

The vulnerability could be exploited by malicious actors to launch attacks on systems running the affected versions, leading to potential data breaches or unauthorized access.

Technical Details of CVE-2019-6663

This section provides more in-depth technical details about the CVE.

Vulnerability Description

The vulnerability affects the configuration utility of the following versions:

BIG-IP: 15.0.0-15.0.1, 14.0.0-14.1.2.2, 13.1.0-13.1.3.1, 12.1.0-12.1.5, 11.5.1-11.6.5.1
BIG-IQ: 7.0.0, 6.0.0-6.1.0, 5.2.0-5.4.0
iWorkflow: 2.3.0
Enterprise Manager: 3.1.1

Affected Systems and Versions

The vulnerability impacts the following products and versions:

BIG-IP: 15.0.0-15.0.1, 14.0.0-14.1.2.2, 13.1.0-13.1.3.1, 12.1.0-12.1.5, 11.5.1-11.6.5.1
BIG-IQ: 7.0.0, 6.0.0-6.1.0, 5.2.0-5.4.0
iWorkflow: 2.3.0
Enterprise Manager: 3.1.1

Exploitation Mechanism

The vulnerability could be exploited through an Anti DNS Pinning (DNS Rebinding) attack, allowing attackers to bypass security mechanisms and potentially gain unauthorized access.

Mitigation and Prevention

Protecting systems from CVE-2019-6663 requires immediate action and long-term security measures.

Immediate Steps to Take

Apply patches or updates provided by F5 to address the vulnerability.
Monitor network traffic for any suspicious activity that could indicate an ongoing attack.

Long-Term Security Practices

Regularly update and patch all software and systems to prevent future vulnerabilities.
Implement network segmentation and access controls to limit the impact of potential attacks.

Patching and Updates

Ensure that all affected systems are updated with the latest patches and security fixes to mitigate the risk of exploitation.