K11742742: iControl REST vulnerability CVE-2022-23023

🗓️ 21 Feb 2023 18:35:32Reported by f5Type

f5🔗 my.f5.com👁 44 Views

iControl REST vulnerability CVE-2022-23023 Undisclosed authenticated user requests can cause memory resource increase, leading to system performance degradation and potential denial-of-service (DoS)

Reporter	Title	Published	Views	Family All 14
ATTACKERKB	CVE-2022-23023	25 Jan 202220:15	–	attackerkb
BDU FSTEC	The vulnerability of the iControl REST API interface for access control and remote authentication, the BIG-IP Access Policy Manager, the virtual server for application protection, the BIG-IP Advanced Web Application Firewall, the BIG-IP Advanced Firewall Manager, the infrastructure status analysis tool, the BIG-IP Application Acceleration Manager, the DDoS protection module, the BIG-IP Fraud Protection Service, the Internet traffic balancing system, the BIG-IP Link Controller, and the local traffic balancing system – all of these allow a perpetrator to cause service interruptions.	21 Jul 202200:00	–	bdu_fstec
CNNVD	F5 BIG-IP 资源管理错误漏洞	19 Jan 202200:00	–	cnnvd
CNVD	F5 BIG-IP Resource Management Error Vulnerability (CNVD-2022-70626)	21 Jan 202200:00	–	cnvd
CVE	CVE-2022-23023	25 Jan 202219:11	–	cve
Cvelist	CVE-2022-23023	25 Jan 202219:11	–	cvelist
EUVD	EUVD-2022-28134	3 Oct 202520:07	–	euvd
F5 Networks	K40084114: Overview of F5 vulnerabilities (January 2022)	21 Feb 202318:54	–	f5
Tenable Nessus	F5 Networks BIG-IP : iControl REST vulnerability (K11742742)	19 Jan 202200:00	–	nessus
NCSC	Vulnerabilities fixed in F5 products	21 Jan 202200:00	–	ncsc

Vulners

Node

f5 big-ip_aamRange<17.0.0

OR

f5 big-ip_afmRange<17.0.0

OR

f5 big-ip_analyticsRange<17.0.0

OR

f5 big-ip_apmRange<17.0.0

OR

f5 big-ip_asmRange<17.0.0

OR

f5 big-ip_ddos_hybrid_defenderRange<17.0.0

OR

f5 big-ip_dnsRange<17.0.0

OR

f5 big-ip_fpsRange<17.0.0

OR

f5 big-ip_gtmRange<17.0.0

OR

f5 big-ip_link_controllerRange<17.0.0

OR

f5 big-ip_ltmRange<17.0.0

OR

f5 big-ip_pemRange<17.0.0

OR

f5 big-ip_ssl_orchestratorRange<17.0.0

OR

f5 big-ip_aamRange16.1.0–16.1.2

OR

f5 big-ip_afmRange16.1.0–16.1.2

OR

f5 big-ip_analyticsRange16.1.0–16.1.2

OR

f5 big-ip_apmRange16.1.0–16.1.2

OR

f5 big-ip_asmRange16.1.0–16.1.2

OR

f5 big-ip_ddos_hybrid_defenderRange16.1.0–16.1.2

OR

f5 big-ip_dnsRange16.1.0–16.1.2

OR

f5 big-ip_fpsRange16.1.0–16.1.2

OR

f5 big-ip_gtmRange16.1.0–16.1.2

OR

f5 big-ip_link_controllerRange16.1.0–16.1.2

OR

f5 big-ip_ltmRange16.1.0–16.1.2

OR

f5 big-ip_pemRange16.1.0–16.1.2

OR

f5 big-ip_ssl_orchestratorRange16.1.0–16.1.2

OR

f5 big-ip_aamRange15.1.0–15.1.4

OR

f5 big-ip_afmRange15.1.0–15.1.4

OR

f5 big-ip_analyticsRange15.1.0–15.1.4

OR

f5 big-ip_apmRange15.1.0–15.1.4

OR

f5 big-ip_asmRange15.1.0–15.1.4

OR

f5 big-ip_ddos_hybrid_defenderRange15.1.0–15.1.4

OR

f5 big-ip_dnsRange15.1.0–15.1.4

OR

f5 big-ip_fpsRange15.1.0–15.1.4

OR

f5 big-ip_gtmRange15.1.0–15.1.4

OR

f5 big-ip_link_controllerRange15.1.0–15.1.4

OR

f5 big-ip_ltmRange15.1.0–15.1.4

OR

f5 big-ip_pemRange15.1.0–15.1.4

OR

f5 big-ip_ssl_orchestratorRange15.1.0–15.1.4

OR

f5 big-ip_aamRange14.1.0–14.1.4

OR

f5 big-ip_afmRange14.1.0–14.1.4

OR

f5 big-ip_analyticsRange14.1.0–14.1.4

OR

f5 big-ip_apmRange14.1.0–14.1.4

OR

f5 big-ip_asmRange14.1.0–14.1.4

OR

f5 big-ip_ddos_hybrid_defenderRange14.1.0–14.1.4

OR

f5 big-ip_dnsRange14.1.0–14.1.4

OR

f5 big-ip_fpsRange14.1.0–14.1.4

OR

f5 big-ip_gtmRange14.1.0–14.1.4

OR

f5 big-ip_link_controllerRange14.1.0–14.1.4

OR

f5 big-ip_ltmRange14.1.0–14.1.4

OR

f5 big-ip_pemRange14.1.0–14.1.4

OR

f5 big-ip_ssl_orchestratorRange14.1.0–14.1.4

OR

f5 big-ip_aamRange13.1.0–13.1.4

OR

f5 big-ip_afmRange13.1.0–13.1.4

OR

f5 big-ip_analyticsRange13.1.0–13.1.4

OR

f5 big-ip_apmRange13.1.0–13.1.4

OR

f5 big-ip_asmRange13.1.0–13.1.4

OR

f5 big-ip_ddos_hybrid_defenderRange13.1.0–13.1.4

OR

f5 big-ip_dnsRange13.1.0–13.1.4

OR

f5 big-ip_fpsRange13.1.0–13.1.4

OR

f5 big-ip_gtmRange13.1.0–13.1.4

OR

f5 big-ip_link_controllerRange13.1.0–13.1.4

OR

f5 big-ip_ltmRange13.1.0–13.1.4

OR

f5 big-ip_pemRange13.1.0–13.1.4

OR

f5 big-ip_ssl_orchestratorRange13.1.0–13.1.4

OR

f5 big-ip_aamRange12.1.0–12.1.5

OR

f5 big-ip_afmRange12.1.0–12.1.5

OR

f5 big-ip_analyticsRange12.1.0–12.1.5

OR

f5 big-ip_apmRange12.1.0–12.1.5

OR

f5 big-ip_asmRange12.1.0–12.1.5

OR

f5 big-ip_ddos_hybrid_defenderRange12.1.0–12.1.5

OR

f5 big-ip_dnsRange12.1.0–12.1.5

OR

f5 big-ip_fpsRange12.1.0–12.1.5

OR

f5 big-ip_gtmRange12.1.0–12.1.5

OR

f5 big-ip_link_controllerRange12.1.0–12.1.5

OR

f5 big-ip_ltmRange12.1.0–12.1.5

OR

f5 big-ip_pemRange12.1.0–12.1.5

OR

f5 big-ip_ssl_orchestratorRange12.1.0–12.1.5

OR

f5 big-iq_centralized_managementRange8.0.0–8.4.0

OR

f5 big-iq_centralized_managementRange7.0.0–7.1.0

19 Feb 2026 23:48Current

6.4Medium risk

Vulners AI Score6.4

CVSS 24

CVSS 3.16.5

EPSS0.00895

icontrol rest cve-2022-23023 authenticated user memory resource system performance denial-of-service dos