F5 BIG-IP iControl REST Authentication Bypass Vulnerability

F5 BIG-IP is an application delivery platform from F5 USA that integrates traffic management, DNS, inbound and outbound rules, web application firewall, web gateway, load balancing, etc. The F5 BIG-IP iControl REST authentication bypass vulnerability is due to a bypass flaw in the authentication function of the iControl REST component, which causes authorization access mechanism to fail. An unauthenticated attacker uses this vulnerability to bypass authentication by sending a malicious construct request to the BIG-IP server to execute arbitrary system commands on the target system, create or delete files and disable services, and other operations.