cyber.hendryadrian.com
Security News · ncsc.gov.uk

NCSC Urges F5 Customers to Apply Security Updates After Network Compromise

· Original article ↗

Summary

F5 reported a network compromise and data exfiltration that included some BIG-IP source code and vulnerability information. The NCSC advises identifying F5 products, securing management interfaces and installing F5’s latest security updates; no customer network impact,

Key points

  • F5 reported that its systems were compromised and data was exfiltrated, including part of its BIG-IP source code and vulnerability information.
  • The NCSC says the stolen material could help an attacker analyze F5 products and develop targeted exploits.
  • Successful exploitation could expose embedded credentials and API keys, enable lateral movement and data theft, or establish persistent access.
  • The NCSC reports no current indication that customer networks were impacted through the compromise.
  • Organisations should identify their F5 hardware, software and virtualised products and install F5’s latest security updates.
  • F5 management interfaces should not be exposed to the internet; organisations finding an exposed interface should conduct a compromise assessment.

Article Details

Event Type
F5 reported a compromise of its systems and data exfiltration.
Impact
The reportedly exfiltrated data includes some BIG-IP source code and vulnerability information. The access could help a threat actor identify vulnerabilities and develop targeted exploits. Successful exploitation of affected F5 products could expose embedded credentials and API keys, enable lateral movement and further data exfiltration, and establish persistent access. The NCSC says there is currently no indication that customer networks have been affected through the F5 network compromise.

Vendors

F5The NCSC is advising organisations to follow the guidance issued by F5 and to install the latest security updates.

Products

BIG IP NextSoftware: All devices running BIG-IP (F5OS), BIG-IP (TMOS), Virtual Edition (VE), BIG IP Next, BIG- IQ, and BIG-IP Next for Kubernetes (BNK) / Cloud-Native Network Functions (CNF)BIG-IP (F5OS)Software: All devices running BIG-IP (F5OS), BIG-IP (TMOS), Virtual Edition (VE), BIG IP Next, BIG- IQ, and BIG-IP Next for Kubernetes (BNK) / Cloud-Native Network Functions (CNF)BIG-IP (TMOS)Software: All devices running BIG-IP (F5OS), BIG-IP (TMOS), Virtual Edition (VE), BIG IP Next, BIG- IQ, and BIG-IP Next for Kubernetes (BNK) / Cloud-Native Network Functions (CNF)BIG-IP iSeriesHardware: BIG-IP iSeries, rSeries, or any other F5 device that has reached end of supportBIG-IP Next for Kubernetes (BNK)Software: All devices running BIG-IP (F5OS), BIG-IP (TMOS), Virtual Edition (VE), BIG IP Next, BIG- IQ, and BIG-IP Next for Kubernetes (BNK) / Cloud-Native Network Functions (CNF)Cloud-Native Network Functions (CNF)Software: All devices running BIG-IP (F5OS), BIG-IP (TMOS), Virtual Edition (VE), BIG IP Next, BIG- IQ, and BIG-IP Next for Kubernetes (BNK) / Cloud-Native Network Functions (CNF)Virtual Edition (VE)Software: All devices running BIG-IP (F5OS), BIG-IP (TMOS), Virtual Edition (VE), BIG IP Next, BIG- IQ, and BIG-IP Next for Kubernetes (BNK) / Cloud-Native Network Functions (CNF)

Related Articles