F5 iControl SOAP elevation of privilege vulnerability

2023-02-0100:00:00

China National Vulnerability Database

www.cnvd.org.cn

JSON

F5 BIG-IP is an application delivery platform from F5 that integrates network traffic orchestration, load balancing, intelligent DNS, remote access policy management, etc. An elevation of privilege vulnerability exists in F5 iControl SOAP, which can be exploited by an authenticated attacker to crash the iControl SOAP CGI process or execute arbitrary code.

CPENameOperatorVersion
f5 big-ip (all modules)eq17.0.0
f5 big-ip (all modules)eq13.1.5
f5 big-ip (all modules) >=14.1.4.6，le14.1.5
f5 big-ip (all modules) >=15.1.5.1，le15.1.8
f5 big-ip (all modules) >=16.1.2.2，le16.1.3

Name	Operator	Version
f5 big-ip (all modules)	eq	17.0.0
f5 big-ip (all modules)	eq	13.1.5
f5 big-ip (all modules) >=14.1.4.6，	le	14.1.5
f5 big-ip (all modules) >=15.1.5.1，	le	15.1.8
f5 big-ip (all modules) >=16.1.2.2，	le	16.1.3

JSON

Related for CNVD-2023-05965