https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-11T21:25:36.869079+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/CERTFR-2017-AVI-216 CERTFR-2017-AVI-216 — De multiples vulnérabilités ont été corrigées dans <span class="textit">F5 BIG-IP</span>. Certaines d'entre elles perme… 2026-10-11T21:25:36.942597+00:00 CERTFR-2017-AVI-216 https://vulnerability.circl.lu/vuln/cnvd-2017-35149 cnvd-2017-35149 2026-10-11T21:25:36.942699+00:00 cnvd-2017-35149 https://vulnerability.circl.lu/vuln/fkie_cve-2017-6144 fkie_cve-2017-6144 2026-10-11T21:25:36.942732+00:00

In F5 BIG-IP PEM 12.1.0 through 12.1.2 when downloading the Type Allocation Code (TAC) database file via HTTPS, the server's certificate is not verified. Attackers in a privileged network position may be able to launch a man-in-the-middle attack against these connections. TAC databases are used in BIG-IP PEM for Device Type and OS (DTOS) and Tethering detection. Customers not using BIG-IP PEM, not configuring downloads of TAC database files, or not using HTTP for that download are not affected.

 https://vulnerability.circl.lu/vuln/ghsa-6p94-89qp-5g52 GHSA-6p94-89qp-5g52 2026-10-11T21:25:36.942801+00:00

In F5 BIG-IP PEM 12.1.0 through 12.1.2 when downloading the Type Allocation Code (TAC) database file via HTTPS, the server's certificate is not verified. Attackers in a privileged network position may be able to launch a man-in-the-middle attack against these connections. TAC databases are used in BIG-IP PEM for Device Type and OS (DTOS) and Tethering detection. Customers not using BIG-IP PEM, not configuring downloads of TAC database files, or not using HTTP for that download are not affected.

 https://vulnerability.circl.lu/vuln/gsd-2017-6144 gsd-2017-6144 2026-10-11T21:25:36.942835+00:00 gsd-2017-6144 https://vulnerability.circl.lu/vuln/var-201710-1064 VAR-201710-1064 2026-10-11T21:25:36.942854+00:00

In F5 BIG-IP PEM 12.1.0 through 12.1.2 when downloading the Type Allocation Code (TAC) database file via HTTPS, the server's certificate is not verified. Attackers in a privileged network position may be able to launch a man-in-the-middle attack against these connections. TAC databases are used in BIG-IP PEM for Device Type and OS (DTOS) and Tethering detection. Customers not using BIG-IP PEM, not configuring downloads of TAC database files, or not using HTTP for that download are not affected. F5 BIG-IP PEM Contains a certificate validation vulnerability.The information may be obtained and the information may be falsified. Multiple F5 BIG-IP Products are prone to a security-bypass vulnerability. Successfully exploiting this issue may allow attackers to perform unauthorized actions. This may lead to other attacks. F5 BIG-IP is an all-in-one network device integrated with network traffic management, application security management, load balancing and other functions from F5 Corporation of the United States. PEM is one of the Policy Enforcement Managers. Attackers can use this vulnerability to implement man-in-the-middle attacks to tamper with data or obtain information