Cryptographic issues in F5 Networks products - CVE-2021-22981
Published: February 11, 2021
Vulnerability identifier: #VU50609
CSH Severity: Low
CVSS v4: 2.1 [CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2021-22981
CWE-ID: CWE-310
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote attacker to perform MitM attack.
The vulnerability exists due to the original TLS protocol includes a weakness in the master secret negotiation that is mitigated by the Extended Master Secret (EMS) extension defined in RFC 7627. TLS connections that do not use EMS are vulnerable to man-in-the-middle attacks during renegotiation.
Affected software
BIG-IP AFM
BIG-IP ASM
BIG-IP LTM
BIG-IP FPS
BIG-IP GTM
BIG-IP APM
BIG-IP Analytics
BIG-IP PEM
BIG-IP DDHD
BIG-IP
BIG-IP SSLO
BIG-IP DNS
BIG-IP AAM
BIG-IP Link Controller
BIG-IP Advanced WAF
BIG-IP ASM
BIG-IP LTM
BIG-IP FPS
BIG-IP GTM
BIG-IP APM
BIG-IP Analytics
BIG-IP PEM
BIG-IP DDHD
BIG-IP
BIG-IP SSLO
BIG-IP DNS
BIG-IP AAM
BIG-IP Link Controller
BIG-IP Advanced WAF
How to mitigate CVE-2021-22981
Install updates from vendor's website.
The issue is fixed starting from 13.0.0 branch.