© 2026 vulntracker.io

CVE-2017-6160

N/A

Published: October 27, 2017 at 02:00 PM UTC

Updated: June 17, 2026 at 01:21 AM UTC

4 products affected across 2 vendorsBig IP Policy Enforcement ManagerBig IP Application Acceleration ManagerBIG-IP Policy Enforcement Manager

Using BIG-IP AAM, PEM by F5 Networks, Inc.?

Get instant alerts when new vulnerabilities affect BIG-IP AAM, PEM - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

N/A

Exploit prediction

EPSS 4%

Description

In F5 BIG-IP AAM and PEM software version 12.0.0 to 12.1.1, 11.6.0 to 11.6.1, 11.4.1 to 11.5.4, a remote attacker may create maliciously crafted HTTP request to cause Traffic Management Microkernel (TMM) to restart and temporarily fail to process traffic. This issue is exposed on virtual servers using a Policy Enforcement profile or a Web Acceleration profile. Systems that do not have BIG-IP AAM module provisioned are not vulnerable. The Traffic Management Microkernel (TMM) may restart and temporarily fail to process traffic. Systems that do not have BIG-IP AAM or PEM module provisioned are not vulnerable.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Big IP Application Acceleration Manager · F5

95%

11.4.0 11.4.1 11.5.0 11.5.1 11.5.2 11.5.3 11.5.4 11.5.5 11.6.0 11.6.1 12.0.0 12.1.0 12.1.1

Big IP Policy Enforcement Manager · F5

95%

11.4.0 11.4.1 11.5.0 11.5.1 11.5.2 11.5.3 11.5.4 11.5.5 11.6.0 11.6.1 12.0.0 12.1.0 12.1.1

BIG-IP Application Acceleration Manager · F5-networks

60%

11.4.1 - 11.5.4 11.6.0 - 11.6.112.0.0 - 12.1.1

BIG-IP Policy Enforcement Manager · F5-networks

60%

11.4.1 - 11.5.4 11.6.0 - 11.6.112.0.0 - 12.1.1

Remediation

No guide yet

No remediation guidance has been written for this CVE yet. What the record does show:

Patch and advisory references

https://support.f5.com/csp/article/K19430431

References (3)

VDB Entryx_refsource_BIDThird Party Advisory

Source: [email protected]

http://www.securityfocus.com/bid/101632

VDB Entryx_refsource_SECTRACKThird Party Advisory

Source: [email protected]

http://www.securitytracker.com/id/1039670

x_refsource_CONFIRMVendor Advisory

Source: [email protected]

https://support.f5.com/csp/article/K19430431

CVSS

4.3MEDIUM[email protected]

Confidentiality: NONE
Integrity: NONE
Availability: PARTIAL

Vector?

Quick Info

StatusMODIFIED

CWE

NVD-CWE-noinfo

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create account Sign in

Free plan, no card