{"id":"CVE-2017-6131","url":"https://www.cyber-defence.io/tools/cve/CVE-2017-6131","generatedAt":"2026-10-29T00:34:55.306Z","title":"In some circumstances, an F5 BIG-IP version 12.0.0 to 12.1.2 and 13.0.0 Azure cloud instance may contain a default administrative password which could be used to remotely log into the BIG-IP system.","description":"In some circumstances, an F5 BIG-IP version 12.0.0 to 12.1.2 and 13.0.0 Azure cloud instance may contain a default administrative password which could be used to remotely log into the BIG-IP system. The impacted administrative account is the Azure instance administrative user that was created at deployment. The root and admin accounts are not vulnerable. An attacker may be able to remotely access the BIG-IP host via SSH.","published":"2017-05-23T15:29:00.000Z","lastModified":"2026-06-17T01:21:49.000Z","status":"Modified","sourceIdentifier":"f5sirt@f5.com","cvss":{"version":"3.0","score":9.8,"severity":"CRITICAL","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},"cwe":["CWE-798"],"affected":["f5/big-ip local traffic manager","f5/big-ip application acceleration manager","f5/big-ip advanced firewall manager","f5/big-ip access policy manager","f5/big-ip application security manager","f5/big-ip domain name system","f5/big-ip link controller","f5/big-ip policy enforcement manager","f5/big-ip websafe"],"epss":{"score":0.01141,"percentile":0.66479,"date":"2026-10-27","history":[]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"high","text":"High impact if exploited, but EPSS currently rates exploitation as unlikely (1.14%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit."},"changes":[],"references":[{"url":"http://www.securitytracker.com/id/1038569","source":"f5sirt@f5.com"},{"url":"https://support.f5.com/csp/article/K61757346","tags":["Permissions Required","Vendor Advisory"],"source":"f5sirt@f5.com"},{"url":"http://www.securitytracker.com/id/1038569","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://support.f5.com/csp/article/K61757346","tags":["Permissions Required","Vendor Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2017-6131","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}