Lucene search
K
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in

CVE-2021-22974

🗓️ 12 Feb 2021 16:23:27Reported by f5Type 
cve
 cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 91 Views

CVE-2021-22974 On BIG-IP version 16.0.x before 16.0.1.1, 15.1.x before 15.1.2, 14.1.x before 14.1.3.1, and 13.1.x before 13.1.3.6 and all versions of BIG-IQ 7.x and 6.x, an authenticated attacker with access to iControl REST over the control plane may be able to take advantage of a race condition to execute commands with an elevated privilege level. This vulnerability is due to an incomplete fix for CVE-2017-6167. Note: Software versions which have reached End of Software Development (EoSD) are not evaluated

Related
Detection
Affected
Refs
Social
ReporterTitlePublishedViews
Family
Circl		CVE-2021-22974
12 Feb 202120:43
–circl
CNNVD		BIG-IP 竞争条件问题漏洞
11 Feb 202100:00
–cnnvd
CNVD		BIG-IP Competitive Conditions Issue Vulnerability (CNVD-2021-13215)
25 Feb 202100:00
–cnvd
Cvelist		CVE-2021-22974
12 Feb 202116:23
–cvelist
EUVD		EUVD-2021-10092
7 Oct 202500:30
–euvd
F5 Networks		K68652018: iControl REST vulnerability CVE-2021-22974
21 Feb 202319:30
–f5
Tenable Nessus		F5 Networks BIG-IP : iControl REST vulnerability (K68652018)
11 Feb 202100:00
–nessus
NCSC		Multiple vulnerabilities fixed in F5 BIG-IP products
11 Feb 202100:00
–ncsc
NVD		CVE-2021-22974
12 Feb 202117:15
–nvd
Prion		Race condition
12 Feb 202117:15
–prion
Rows per page
NVD
Node
f5big-ip_access_policy_managerRange13.1.0–13.1.3.6
OR
f5big-ip_access_policy_managerRange14.1.0–14.1.3.1
OR
f5big-ip_access_policy_managerRange15.1.0–15.1.2
OR
f5big-ip_access_policy_managerRange16.0.0–16.0.1.1
OR
f5big-ip_advanced_firewall_managerRange13.1.0–13.1.3.5
OR
f5big-ip_advanced_firewall_managerRange14.1.0–14.1.3.1
OR
f5big-ip_advanced_firewall_managerRange15.1.0–15.1.2
OR
f5big-ip_advanced_firewall_managerRange16.0.0–16.0.1.1
OR
f5big-ip_advanced_web_application_firewallRange13.1.0–13.1.3.6
OR
f5big-ip_advanced_web_application_firewallRange14.1.0–14.1.3.1
OR
f5big-ip_advanced_web_application_firewallRange15.1.0–15.1.2
OR
f5big-ip_advanced_web_application_firewallRange16.0.0–16.0.1.1
OR
f5big-ip_analyticsRange13.1.0–13.1.3.6
OR
f5big-ip_analyticsRange14.1.0–14.1.3.1
OR
f5big-ip_analyticsRange15.1.0–15.1.2
OR
f5big-ip_analyticsRange16.0.0–16.0.1.1
OR
f5big-ip_application_acceleration_managerRange13.1.0–13.1.3.6
OR
f5big-ip_application_acceleration_managerRange14.1.0–14.1.3.1
OR
f5big-ip_application_acceleration_managerRange15.1.0–15.1.2
OR
f5big-ip_application_acceleration_managerRange16.0.0–16.0.1.1
OR
f5big-ip_application_security_managerRange13.1.0–13.1.3.6
OR
f5big-ip_application_security_managerRange14.1.0–14.1.3.1
OR
f5big-ip_application_security_managerRange15.1.0–15.1.2
OR
f5big-ip_application_security_managerRange16.0.0–16.0.1.1
OR
f5big-ip_ddos_hybrid_defenderRange13.1.0–13.1.3.6
OR
f5big-ip_ddos_hybrid_defenderRange14.1.0–14.1.3.1
OR
f5big-ip_ddos_hybrid_defenderRange15.1.0–15.1.2
OR
f5big-ip_ddos_hybrid_defenderRange16.0.0–16.0.1.1
OR
f5big-ip_domain_name_systemRange13.1.0–13.1.3.6
OR
f5big-ip_domain_name_systemRange14.1.0–14.1.3.1
OR
f5big-ip_domain_name_systemRange15.1.0–15.1.2
OR
f5big-ip_domain_name_systemRange16.0.0–16.0.1.1
OR
f5big-ip_fraud_protection_serviceRange13.1.0–13.1.3.5
OR
f5big-ip_fraud_protection_serviceRange14.1.0–14.1.3.1
OR
f5big-ip_fraud_protection_serviceRange15.1.0–15.1.2
OR
f5big-ip_fraud_protection_serviceRange16.0.0–16.0.1.1
OR
f5big-ip_global_traffic_managerRange13.1.0–13.1.3.6
OR
f5big-ip_global_traffic_managerRange14.1.0–14.1.3.1
OR
f5big-ip_global_traffic_managerRange15.1.0–15.1.2
OR
f5big-ip_global_traffic_managerRange16.0.0–16.0.1.1
OR
f5big-ip_link_controllerRange13.1.0–13.1.3.6
OR
f5big-ip_link_controllerRange14.1.0–14.1.3.1
OR
f5big-ip_link_controllerRange15.1.0–15.1.2
OR
f5big-ip_link_controllerRange16.0.0–16.0.1.1
OR
f5big-ip_local_traffic_managerRange13.1.0–13.1.3.6
OR
f5big-ip_local_traffic_managerRange14.1.0–14.1.3.1
OR
f5big-ip_local_traffic_managerRange15.1.0–15.1.2
OR
f5big-ip_local_traffic_managerRange16.0.0–16.0.1.1
OR
f5big-ip_policy_enforcement_managerRange13.1.0–13.1.3.6
OR
f5big-ip_policy_enforcement_managerRange14.1.0–14.1.3.1
OR
f5big-ip_policy_enforcement_managerRange15.1.0–15.1.2
OR
f5big-ip_policy_enforcement_managerRange16.0.0–16.0.1.1
OR
f5big-ip_ssl_orchestratorRange13.1.0–13.1.3.6
OR
f5big-ip_ssl_orchestratorRange14.1.0–14.1.3.1
OR
f5big-ip_ssl_orchestratorRange15.1.0–15.1.2
OR
f5big-ip_ssl_orchestratorRange16.0.0–16.0.1.1
OR
f5big-iq_centralized_managementRange6.0.0–6.1.0
OR
f5big-iq_centralized_managementRange7.0.0–7.1.0
[
  {
    "product": "BIG-IP, BIG-IQ",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "BIG-IP version 16.0.x before 16.0.1.1, 15.1.x before 15.1.2, 14.1.x before 14.1.3.1, and 13.1.x before 13.1.3.6 and all versions of BIG-IQ 7.x and 6.x"
      }
    ]
  }
]

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
21 Nov 2024 05:51Current
7.6High risk
Vulners AI Score7.6
CVSS 26
CVSS 3.17.5
EPSS0.00326
CWE-362
cvebig-ipbig-iqicontrol restcommand executionprivilege escalationrace conditioncve-2017-6167nvd
91