K44885536: iControl REST vulnerability CVE-2019-6622

🗓️ 21 Feb 2023 19:53:57Reported by f5Type

f5🔗 my.f5.com👁 27 Views

Undisclosed iControl REST worker vulnerability allows command injection by admin or resource user, bypassing Appliance mode security on BIG-IP systems

Reporter	Title	Published	Views	Family All 9
CNVD	F5 BIG-IP Command Injection Vulnerability (CNVD-2019-30617)	8 Jul 201900:00	–	cnvd
CVE	CVE-2019-6622	2 Jul 201920:25	–	cve
Cvelist	CVE-2019-6622	2 Jul 201920:25	–	cvelist
EUVD	EUVD-2019-16181	7 Oct 202500:30	–	euvd
Tenable Nessus	F5 Networks BIG-IP : iControl REST vulnerability (K44885536)	2 Jul 201900:00	–	nessus
NVD	CVE-2019-6622	2 Jul 201921:15	–	nvd
OSV	CVE-2019-6622	2 Jul 201921:15	–	osv
Prion	Command injection	2 Jul 201921:15	–	prion
RedhatCVE	CVE-2019-6622	22 May 202508:46	–	redhatcve

Vulners

Node

f5 big-ip_ltmRange<15.0.0

OR

f5 big-ip_aamRange<15.0.0

OR

f5 big-ip_afmRange<15.0.0

OR

f5 big-ip_analyticsRange<15.0.0

OR

f5 big-ip_apmRange<15.0.0

OR

f5 big-ip_asmRange<15.0.0

OR

f5 big-ip_dnsRange<15.0.0

OR

f5 big-ip_edge_gatewayRange<15.0.0

OR

f5 big-ip_fpsRange<15.0.0

OR

f5 big-ip_gtmRange<15.0.0

OR

f5 big-ip_link_controllerRange<15.0.0

OR

f5 big-ip_pemRange<15.0.0

OR

f5 big-ip_webacceleratorRange<15.0.0

OR

f5 big-ip_ltmRange14.0.0–14.1.0.5

OR

f5 big-ip_aamRange14.0.0–14.1.0.5

OR

f5 big-ip_afmRange14.0.0–14.1.0.5

OR

f5 big-ip_analyticsRange14.0.0–14.1.0.5

OR

f5 big-ip_apmRange14.0.0–14.1.0.5

OR

f5 big-ip_asmRange14.0.0–14.1.0.5

OR

f5 big-ip_dnsRange14.0.0–14.1.0.5

OR

f5 big-ip_edge_gatewayRange14.0.0–14.1.0.5

OR

f5 big-ip_fpsRange14.0.0–14.1.0.5

OR

f5 big-ip_gtmRange14.0.0–14.1.0.5

OR

f5 big-ip_link_controllerRange14.0.0–14.1.0.5

OR

f5 big-ip_pemRange14.0.0–14.1.0.5

OR

f5 big-ip_webacceleratorRange14.0.0–14.1.0.5

OR

f5 big-ip_ltmRange13.0.0–13.1.1.4

OR

f5 big-ip_aamRange13.0.0–13.1.1.4

OR

f5 big-ip_afmRange13.0.0–13.1.1.4

OR

f5 big-ip_analyticsRange13.0.0–13.1.1.4

OR

f5 big-ip_apmRange13.0.0–13.1.1.4

OR

f5 big-ip_asmRange13.0.0–13.1.1.4

OR

f5 big-ip_dnsRange13.0.0–13.1.1.4

OR

f5 big-ip_edge_gatewayRange13.0.0–13.1.1.4

OR

f5 big-ip_fpsRange13.0.0–13.1.1.4

OR

f5 big-ip_gtmRange13.0.0–13.1.1.4

OR

f5 big-ip_link_controllerRange13.0.0–13.1.1.4

OR

f5 big-ip_pemRange13.0.0–13.1.1.4

OR

f5 big-ip_webacceleratorRange13.0.0–13.1.1.4

OR

f5 big-ip_ltmRange12.1.0–12.1.5

OR

f5 big-ip_aamRange12.1.0–12.1.5

OR

f5 big-ip_afmRange12.1.0–12.1.5

OR

f5 big-ip_analyticsRange12.1.0–12.1.5

OR

f5 big-ip_apmRange12.1.0–12.1.5

OR

f5 big-ip_asmRange12.1.0–12.1.5

OR

f5 big-ip_dnsRange12.1.0–12.1.5

OR

f5 big-ip_edge_gatewayRange12.1.0–12.1.5

OR

f5 big-ip_fpsRange12.1.0–12.1.5

OR

f5 big-ip_gtmRange12.1.0–12.1.5

OR

f5 big-ip_link_controllerRange12.1.0–12.1.5

OR

f5 big-ip_pemRange12.1.0–12.1.5

OR

f5 big-ip_webacceleratorRange12.1.0–12.1.5

OR

f5 big-ip_ltmRange11.5.1–11.6.5

OR

f5 big-ip_aamRange11.5.1–11.6.5

OR

f5 big-ip_afmRange11.5.1–11.6.5

OR

f5 big-ip_analyticsRange11.5.1–11.6.5

OR

f5 big-ip_apmRange11.5.1–11.6.5

OR

f5 big-ip_asmRange11.5.1–11.6.5

OR

f5 big-ip_dnsRange11.5.1–11.6.5

OR

f5 big-ip_edge_gatewayRange11.5.1–11.6.5

OR

f5 big-ip_fpsRange11.5.1–11.6.5

OR

f5 big-ip_gtmRange11.5.1–11.6.5

OR

f5 big-ip_link_controllerRange11.5.1–11.6.5

OR

f5 big-ip_pemRange11.5.1–11.6.5

OR

f5 big-ip_webacceleratorRange11.5.1–11.6.5

21 Feb 2023 19:53Current

7.6High risk

Vulners AI Score7.6

CVSS 26.5

CVSS 37.2

EPSS0.02522

icontrol rest command injection appliance mode security big-ip systems cve-2019-6622 bash commands