CVE-2019-6688On BIG-IP versions 15.0.0-15.0.1.1, 14.1.0-14.1.2.2, 14.0.0-14.0.1, 13.1.0-13.1.3.1, 12.1.0-12.1.5, and 11.5.2-11.6.5 and BIG-IQ versions…

4.3MediumCVSS base score
0.70%Exploitation in 30 daysEPSS · top 46% of all CVEs
NoKnown exploitednot in CISA's KEV catalog
NonePublic exploitsnone known yet

Description

On BIG-IP versions 15.0.0-15.0.1.1, 14.1.0-14.1.2.2, 14.0.0-14.0.1, 13.1.0-13.1.3.1, 12.1.0-12.1.5, and 11.5.2-11.6.5 and BIG-IQ versions 6.0.0-6.1.0 and 5.2.0-5.4.0, a user is able to obtain the secret that was being used to encrypt a BIG-IP UCS backup file while sending SNMP query to the BIG-IP or BIG-IQ system, however the user can not access to the UCS files.

Timeline

2019
22 Jan 2019
22 Jan 2019
ID reserved
By f5
23 Dec 201911 months later
23 Dec 2019· 11 months later
Published
2024
4 Aug 20245 years later
4 Aug 2024· 5 years later
Record updated

Changes after publication (a new score, a public exploit, EPSS crossing 1, 10 or 50 %, leaving KEV) are kept since November 2026; earlier ones are not known.

Scores

CVSS scores of CVE-2019-6688, by who scored it
Scored by	CVSS	Score	Vector
NVDNVD · Modified	3.1	Medium4.3	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

EPSS (exploitation in 30 days): 0.70% · top 46% of all CVEs (12 Nov 2026)

The list uses the assigner's score when there is one, then CISA's, then NVD's: Medium 4.3.

Affected products

F5 · BIG-IP
- affected BIG-IP 15.0.0-15.0.1.1
- affected 14.1.0-14.1.2.2
- affected 14.0.0-14.0.1
- affected 13.1.0-13.1.3.1
- affected 12.1.0-12.1.5
- affected 11.5.2-11.6.5
F5 · BIG-IQ
- affected BIG-IQ 6.0.0-6.1.0
- affected 5.2.0-5.4.0

References1

https://support.f5.com/csp/article/K25607522 (opens in a new tab)x_refsource_CONFIRMx_transferred

Sources

The same CVE in the primary databases and aggregators, to check against.

Badge for a README or a ticket

[![CVE-2019-6688](https://cveledger.app/badge/CVE-2019-6688.svg)](https://cveledger.app/cve/CVE-2019-6688)

Record last updated 4 Aug 2024, 20:31 UTC.