Vulnerabilitycritical
Threat actors are actively exploiting CVE-2022-1388 RCE in F5 BIG
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2022-1388 | Unauthenticated RCE in F5 BIG-IP via Missing Authentication | 9.8 | 100% | KEVRansomwarePoC ×4 | KEV |
Indicators of compromise
auto-extracted · verify before use · export allAll| Type | Indicator | Context |
|---|---|---|
| ipv4 | 209.127.252.207 | oor para mantener el acceso. Ataques desde: 216.162.206.213 209.127.252.207 Payload escribe en /tmp/f5.sh, ejecuta y elimina. pic.twitt |
| ipv4 | 216.162.206.213 | /css/ como backdoor para mantener el acceso. Ataques desde: 216.162.206.213 209.127.252.207 Payload escribe en /tmp/f5.sh, ejecuta y el |
From the original article
2 min read at securityaffairs.com
Threat actors are exploiting critical F5 BIG-IP flaw CVE-2022-1388 to deliver malicious code, cybersecurity researchers warn. Threat actors started massively exploiting the critical remote code execution vulnerability, tracked as CVE-2022-1388 , affecting F5 BIG-IP.
By @securityaffairs · securityaffairs.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.