VDB
CNVD-2021-16852
CNVD-2021-16852
PUBLISHED
F5 BIG-IP是F5公司的一款集成了网络流量编排、负载均衡、智能DNS，远程接入策略管理等功能的应用交付平台。F5 BIG-IQ Centralized Management是F5公司的管理和编排平台，集中管控F5 BIG-IP 物理和虚拟设备及其运行的应用和安全服务。 F5 iControl REST远程命令执行漏洞，该漏洞允许未授权用户通过网络访问icontrol restful API 接口，攻击者可利用该漏洞通过F5的管理接口或本机接口IP地址，执行任意的系统命令，创建或删除文件，禁止系统服务等。
Timeline
- Mar 11, 2021 CVE Published
- Sep 23, 2021 PoC Published
- Nov 4, 2023 PoC Published
- Dec 8, 2023 PoC Published
- Mar 1, 2024 PoC Published
- May 19, 2024 PoC Published
- Feb 25, 2025 PoC Published
- May 5, 2025 PoC Published
- May 9, 2025 PoC Published
- Jul 26, 2025 PoC Published
- Sep 15, 2025 PoC Published
- Sep 30, 2025 PoC Published