kbrain

CVE-2012-1493

HIGH · CVSS 7.8EPSS 63.3%EU EUVD

F5 BIG-IP appliances 9.x before 9.4.8-HF5, 10.x before 10.2.4, 11.0.x before 11.0.0-HF2, and 11.1.x before 11.1.0-HF3, and Enterprise Manager before 2.1.0-HF2, 2.2.x before 2.2.0-HF1, and 2.3.x before 2.3.0-HF3, use a single SSH private key across different customers' installations and do not properly restrict access to this key, which makes it easier for remote attackers to perform SSH logins via the PubkeyAuthentication option.

Key facts

CVSS score
7.8 (v2.0)
Severity
HIGH
CVSS vector
AV:N/AC:L/Au:N/C:C/I:N/A:N
Weakness (CWE)
CWE-255
EPSS score
63.3% (99th percentile)
In CISA KEV
No
In EU EUVD
Yes (EUVD-2012-1511)
Published
July 9, 2012
NVD last modified
June 16, 2026
Status
Modified

EU Vulnerability Database (EUVD)

This vulnerability is also tracked by ENISA as EUVD-2012-1511 in the EU Vulnerability Database. Last updated in EUVD on September 17, 2024.

View on the EU Vulnerability Database

Affected products

  • f5 / big-ip 1000
  • f5 / big-ip 11000
  • f5 / big-ip 11050
  • f5 / big-ip 1500
  • f5 / big-ip 1600
  • f5 / big-ip 2400
  • f5 / big-ip 3400
  • f5 / big-ip 3410
  • f5 / big-ip 3600
  • f5 / big-ip 3900
  • f5 / big-ip 4100
  • f5 / big-ip 5100
  • f5 / big-ip 5110
  • f5 / big-ip 6400
  • f5 / big-ip 6800
  • f5 / big-ip 6900
  • f5 / big-ip 8400
  • f5 / big-ip 8800
  • f5 / big-ip 8900
  • f5 / big-ip 8950
  • f5 / big-ip application security manager
  • f5 / big-ip application security manager
  • f5 / big-ip application security manager
  • f5 / big-ip application security manager
  • f5 / big-ip application security manager
  • f5 / big-ip application security manager
  • f5 / big-ip application security manager
  • f5 / big-ip application security manager
  • f5 / big-ip application security manager
  • f5 / big-ip application security manager
  • f5 / big-ip application security manager
  • f5 / big-ip application security manager
  • f5 / big-ip application security manager
  • f5 / big-ip application security manager
  • f5 / big-ip global traffic manager
  • f5 / big-ip global traffic manager
  • f5 / big-ip global traffic manager
  • f5 / big-ip global traffic manager
  • f5 / big-ip global traffic manager
  • f5 / big-ip global traffic manager
  • f5 / big-ip global traffic manager
  • f5 / big-ip global traffic manager
  • f5 / big-ip global traffic manager
  • f5 / big-ip local traffic manager
  • f5 / big-ip local traffic manager
  • f5 / big-ip local traffic manager
  • f5 / big-ip local traffic manager
  • f5 / big-ip local traffic manager
  • f5 / big-ip local traffic manager
  • f5 / big-ip local traffic manager

and 64 more…

References

Last updated September 17, 2026 · Source: NVD, CISA KEV, FIRST.org EPSS

Query CVEs from your AI assistant

The CVE/NVD Explorer brain answers CVE questions directly inside Claude, ChatGPT, or any MCP assistant — always up to date, no setup. Add it once and stop pasting advisories into chat.

Add the CVE brain