CVE-2022-41617

—

CVSS 3.1

7.2 high

EPSS

1%p66

Published

Oct 19, 2022 (Oct 19, 2022)

Modified

Jun 17, 2026

Description

In versions 16.1.x before 16.1.3.1, 15.1.x before 15.1.6.1, 14.1.x before 14.1.5.1, and 13.1.x before 13.1.5.1, When the Advanced WAF / ASM module is provisioned, an authenticated remote code execution vulnerability exists in the BIG-IP iControl REST interface.

Vendors: f5
Products: big-ip advanced web application firewall, big-ip application security manager
Weakness: CWE-77
Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (1.2%)

In the news0 stories

No ingested article mentions this CVE yet.