VDB
BDU%3A2022-02849
BDU%3A2022-02849
PUBLISHED
CVSS 10 CRITICAL
Уязвимость интерфейса iControl REST API средств защиты приложений BIG-IP, позволяющая нарушителю выполнять произвольные команды, изменять или удалять файлы
Risk Scores
CVSS 2.0
10
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| F5 Networks, Inc. | BIG-IP Access Policy Manager, BIG-IP Advanced Firewall Manager, BIG-IP Analytics, BIG-IP Application Acceleration Manager, BIG-IP Application Security Manager, BIG-IP Link Controller, BIG-IP Local Traffic Manager, BIG-IP Policy Enforcement Manager, BIG-IP Domain Name System, BIG-IP Fraud Protection Service |
Timeline
- May 11, 2022 CVE Published
- Sep 24, 2024 CVE Updated
- Mar 19, 2026 Security Advisory
References
- https://support.f5.com/csp/article/K23605346 url
- https://packetstormsecurity.com/files/167007/F5-BIG-IP-Remote-Code-Execution.html url
- http://packetstormsecurity.com/files/167007/F5-BIG-IP-Remote-Code-Execution.html url
- https://www.cisa.gov/sites/default/files/csv/known_exploited_vulnerabilities.csv url