Vulnerabilitycritical

Threat actors start attacking F5 devices using recent vulnerability

The RecordJan 24, 2023 · 00:00 UTC (Jan 24, 2023)3 min read2 · 1 read

Read at therecord.media

Analyze CVE-2021-22986 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2021-22986 CVE-2020-5902

Tags: cve-2021-22986 cve-2020-5902 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2020-5902	Unauthenticated RCE via path traversal in F5 BIG-IP TMUI	9.8	100%	KEVRansomwarePoC ×8	Jul 1, 2020 KEV Nov 3, 2021
CVE-2021-22986	Unauthenticated RCE in F5 BIG-IP and BIG-IQ iControl REST	9.8	100%	KEVRansomwarePoC ×2	Mar 31, 2021 KEV Nov 3, 2021

From the original article

3 min read at therecord.media

Multiple hacking groups have started attacking F5 networking devices after the publication of proof-of-concept exploit code online for a recent critical vulnerability the vendor patched last week.

The Record

therecord.media

Read the full article at The Record

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.