VDB

BDU%3A2021-04388

BDU%3A2021-04388 PUBLISHED CVSS 10 CRITICAL

Уязвимость интерфейса iControl REST API средств контроля доступа и удаленной аутентификации BIG-IP (LTM, AAM, Advanced WAF, AFM, Analytics, APM, ASM, DDHD, DNS, FPS, GTM, Link Controller, PEM, SSLO), серверного программного обеспечения BIG-IQ Centralized Management, позволяющая нарушителю выполнить произвольные команды в целевой системе

Risk Scores

CVSS 2.0
10

Affected Products

VendorProductVersions
F5 Networks, Inc.BIG-IP Application Acceleration Manager, BIG-IP Advanced Web Application Firewall, BIG-IP Advanced Firewall Manager, BIG-IP Analytics, BIG-IP Access Policy Manager, BIG-IP Application Security Manager, BIG-IP DDos Hybrid Defender, BIG-IP DNS, BIG-IP Global Traffic Manager, BIG-IP Link Controller, BIG-IP Policy Enforcement Manager, BIG-IP SSL Orchestrator, BIG-IQ Centralized Management, BIG-IP LTM

Timeline

  • Sep 6, 2021 CVE Published
  • Sep 23, 2021 PoC Published
  • Nov 4, 2023 PoC Published
  • Dec 8, 2023 PoC Published
  • Mar 1, 2024 PoC Published
  • May 19, 2024 PoC Published
  • Sep 24, 2024 CVE Updated
  • Feb 25, 2025 PoC Published
  • May 5, 2025 PoC Published
  • May 9, 2025 PoC Published
  • Jul 26, 2025 PoC Published
  • Sep 15, 2025 PoC Published

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›