Vulnerabilitycritical

Critical Pre-Auth RCE Flaw Found in F5 Big

The Hacker Newsby @TheHackersNewsMar 11, 2021 · 06:01 UTC (Mar 11, 2021)2 min read3 · 1 read

Read at thehackernews.com

Analyze CVE-2021-22986 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2021-22986 CVE-2021-22992 CVE-2020-5902

Tags: cve-2021-22986 cve-2021-22992 cve-2020-5902 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2020-5902	Unauthenticated RCE via path traversal in F5 BIG-IP TMUI	9.8	100%	KEVRansomwarePoC ×8	Jul 1, 2020 KEV Nov 3, 2021
CVE-2021-22986	Unauthenticated RCE in F5 BIG-IP and BIG-IQ iControl REST	9.8	100%	KEVRansomwarePoC ×2	Mar 31, 2021 KEV Nov 3, 2021
CVE-2021-22992	On BIG-IP versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.2.1, 14.1.x before 14.1.4, 13.1.x before 13.1.3.6, 12.1.x before 12.1.5.3, and 11.6.x before…	9.8	73%		Mar 31, 2021

From the original article

2 min read at thehackernews.com

Application security company F5 Networks on Wednesday published an advisory warning of four critical vulnerabilities impacting multiple products that could result in a denial of service (DoS) attack and even unauthenticated remote code execution on target networks.

The Hacker News

By @TheHackersNews · thehackernews.com

Read the full article at The Hacker News

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.