Medium severity5.3NVD Advisory· Published Jun 1, 2018· Updated Jun 17, 2026

CVE-2018-5524

Description

Under certain conditions, on F5 BIG-IP 13.0.0-13.1.0.5, 12.1.0-12.1.3.1, or 11.6.1 HF2-11.6.3.1, virtual servers configured with Client SSL or Server SSL profiles which make use of network hardware security module (HSM) functionality are exposed and impacted by this issue.

Affected products

F5, Inc./Big IPllm-fuzzy
Range: 13.0.0-13.1.0.5, 12.1.0-12.1.3.1, 11.6.1 HF2-11.6.3.1
F5, Inc./Big Ip (ltm, Aam, Afm, Apm, Asm, Link Controller, Pem, Webaccelerator, Websafe)v5
Range: 13.0.0-13.1.0.5

Patches

Vulnerability mechanics

References

www.securitytracker.com/id/1041020nvdThird Party AdvisoryVDB Entry
support.f5.com/csp/article/K53931245nvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.345
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000