K04234247: Resource Administrator or Administrator role authenticated local command execution vulnerability CVE-2021-23012

🗓️ 21 Feb 2023 18:47:29Reported by f5Type

f5🔗 my.f5.com👁 29 Views

Resource Administrator or Administrator role authenticated local command execution vulnerability CVE-2021-23012 Lack of input validation for system support functionality, allows arbitrary bash commands on BIG-IP. Minor privilege escalation in standard deployment

Reporter	Title	Published	Views	Family All 10
CNNVD	F5 BIG-IP 命令注入漏洞	29 Apr 202100:00	–	cnnvd
CVE	CVE-2021-23012	10 May 202114:08	–	cve
Cvelist	CVE-2021-23012	10 May 202114:08	–	cvelist
EUVD	EUVD-2021-10130	7 Oct 202500:30	–	euvd
F5 Networks	K96639388: Overview of F5 vulnerabilities (April 2021)	21 Feb 202319:42	–	f5
Tenable Nessus	F5 Networks BIG-IP : Resource Administrator or Administrator role authenticated local command execution vulnerability (K04234247)	28 Oct 202100:00	–	nessus
NCSC	Vulnerabilities fixed in F5 BIG-IP	29 Apr 202100:00	–	ncsc
NVD	CVE-2021-23012	10 May 202115:15	–	nvd
Prion	Input validation	10 May 202115:15	–	prion
RedhatCVE	CVE-2021-23012	22 May 202519:17	–	redhatcve

Vulners

Node

f5 big-ip_aamRange16.0.0–16.0.1

OR

f5 big-ip_afmRange16.0.0–16.0.1

OR

f5 big-ip_analyticsRange16.0.0–16.0.1

OR

f5 big-ip_apmRange16.0.0–16.0.1

OR

f5 big-ip_asmRange16.0.0–16.0.1

OR

f5 big-ip_dnsRange16.0.0–16.0.1

OR

f5 big-ip_fpsRange16.0.0–16.0.1

OR

f5 big-ip_gtmRange16.0.0–16.0.1

OR

f5 big-ip_link_controllerRange16.0.0–16.0.1

OR

f5 big-ip_ltmRange16.0.0–16.0.1

OR

f5 big-ip_pemRange16.0.0–16.0.1

OR

f5 big-ip_aamRange15.0.0–15.1.2

OR

f5 big-ip_afmRange15.0.0–15.1.2

OR

f5 big-ip_analyticsRange15.0.0–15.1.2

OR

f5 big-ip_apmRange15.0.0–15.1.2

OR

f5 big-ip_asmRange15.0.0–15.1.2

OR

f5 big-ip_dnsRange15.0.0–15.1.2

OR

f5 big-ip_fpsRange15.0.0–15.1.2

OR

f5 big-ip_gtmRange15.0.0–15.1.2

OR

f5 big-ip_link_controllerRange15.0.0–15.1.2

OR

f5 big-ip_ltmRange15.0.0–15.1.2

OR

f5 big-ip_pemRange15.0.0–15.1.2

OR

f5 big-ip_aamRange14.1.0–14.1.3

OR

f5 big-ip_afmRange14.1.0–14.1.3

OR

f5 big-ip_analyticsRange14.1.0–14.1.3

OR

f5 big-ip_apmRange14.1.0–14.1.3

OR

f5 big-ip_asmRange14.1.0–14.1.3

OR

f5 big-ip_dnsRange14.1.0–14.1.3

OR

f5 big-ip_fpsRange14.1.0–14.1.3

OR

f5 big-ip_gtmRange14.1.0–14.1.3

OR

f5 big-ip_link_controllerRange14.1.0–14.1.3

OR

f5 big-ip_ltmRange14.1.0–14.1.3

OR

f5 big-ip_pemRange14.1.0–14.1.3

OR

f5 big-ip_aamRange13.1.0–13.1.3

OR

f5 big-ip_afmRange13.1.0–13.1.3

OR

f5 big-ip_analyticsRange13.1.0–13.1.3

OR

f5 big-ip_apmRange13.1.0–13.1.3

OR

f5 big-ip_asmRange13.1.0–13.1.3

OR

f5 big-ip_dnsRange13.1.0–13.1.3

OR

f5 big-ip_fpsRange13.1.0–13.1.3

OR

f5 big-ip_gtmRange13.1.0–13.1.3

OR

f5 big-ip_link_controllerRange13.1.0–13.1.3

OR

f5 big-ip_ltmRange13.1.0–13.1.3

OR

f5 big-ip_pemRange13.1.0–13.1.3

21 Feb 2023 18:47Current

8.4High risk

Vulners AI Score8.4

CVSS 27.2

CVSS 3.18.2

EPSS0.0019

resource administrator administrator authenticated local command execution vulnerability cve-2021-23012 input validation system support functionality arbitrary bash commands big-ip privilege escalation standard deployment