Vulnerabilitycritical

Critical F5 BIG-IP flaw allows device takeover, patch ASAP! (CVE-2022-1388)

Help Net Securityby @zeljkazorzMay 9, 2022 · 07:36 UTC (May 9, 2022)1 min read2 · 1 read

Read at helpnetsecurity.com

Analyze CVE-2022-1388 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2022-1388 CVE-2021-22986

Tags: cve-2022-1388 cve-2021-22986 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2021-22986	Unauthenticated RCE in F5 BIG-IP and BIG-IQ iControl REST	9.8	100%	KEVRansomwarePoC ×2	Mar 31, 2021 KEV Nov 3, 2021
CVE-2022-1388	Unauthenticated RCE in F5 BIG-IP via Missing Authentication	9.8	100%	KEVRansomwarePoC ×4	May 5, 2022 KEV May 10, 2022

From the original article

1 min read at helpnetsecurity.com

F5 Networks‘ BIG-IP multi-purpose networking devices/modules are vulnerable to unauthenticated remote code execution attacks via CVE-2022-1388. “This vulnerability may allow an unauthenticated attacker with network access to the BIG-IP system through the management port and/or self IP addresses to execute arbitrary system commands, create or delete files, or disable services,” F5 warned yesterday.

Help Net Security

By @zeljkazorz · helpnetsecurity.com

Read the full article at Help Net Security

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.