CVE-2022-23023

🗓️ 25 Jan 2022 19:11:28Reported by f5Type

Undisclosed authenticated requests cause memory resource increas

Reporter	Title	Published	Views	Family All 13
ATTACKERKB	CVE-2022-23023	25 Jan 202220:15	–	attackerkb
BDU FSTEC	The vulnerability of the iControl REST API interface for access control and remote authentication, the BIG-IP Access Policy Manager, the virtual server for application protection, the BIG-IP Advanced Web Application Firewall, the BIG-IP Advanced Firewall Manager, the infrastructure status analysis tool, the BIG-IP Application Acceleration Manager, the DDoS protection module, the BIG-IP Fraud Protection Service, the Internet traffic balancing system, the BIG-IP Link Controller, and the local traffic balancing system – all of these allow a perpetrator to cause service interruptions.	21 Jul 202200:00	–	bdu_fstec
CNNVD	F5 BIG-IP 资源管理错误漏洞	19 Jan 202200:00	–	cnnvd
CNVD	F5 BIG-IP Resource Management Error Vulnerability (CNVD-2022-70626)	21 Jan 202200:00	–	cnvd
CVE	CVE-2022-23023	25 Jan 202219:11	–	cve
EUVD	EUVD-2022-28134	3 Oct 202520:07	–	euvd
F5 Networks	K11742742: iControl REST vulnerability CVE-2022-23023	21 Feb 202318:35	–	f5
F5 Networks	K40084114: Overview of F5 vulnerabilities (January 2022)	21 Feb 202318:54	–	f5
Tenable Nessus	F5 Networks BIG-IP : iControl REST vulnerability (K11742742)	19 Jan 202200:00	–	nessus
NCSC	Vulnerabilities fixed in F5 products	21 Jan 202200:00	–	ncsc

[
  {
    "product": "BIG-IP & BIG-IQ",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "BIG-IP version 16.1.x before 16.1.2.1, 15.1.x before 15.1.5, 14.1.x before 14.1.4.5, and all versions of 13.1.x and 12.1.x, and BIG-IQ all versions of 8.x and 7.x"
      }
    ]
  }
]

Source	Link
support	www.support.f5.com/csp/article/K11742742

25 Jan 2022 19:11Current

6.6Medium risk

Vulners AI Score6.6

EPSS0.00321

CWE-400