K67501282 : Overview of F5 vulnerabilities (June 2021)

Security Advisory Description

On June 1, 2021, F5 announced the following security issues. This document is intended to serve as an overview of these vulnerabilities to help determine the impact to your F5 devices. You can find the details of each issue in the associated Security Advisory article.

High CVEs

• K08503505: BIG-IP Edge Client for Windows vulnerability CVE-2021-23022

CVSS score: 7.0 (High)

The BIG-IP Edge Client Windows Installer Service’s temporary folder has weak file and folder permissions.

• K33757590: BIG-IP Edge Client for Windows vulnerability CVE-2021-23023

CVSS score: 7.0 (High)

A DLL hijacking issue exists in cachecleaner.dll included in the BIG-IP Edge Client Windows Installer.

Medium CVEs

• K06024431: BIG-IQ vulnerability CVE-2021-23024

CVSS score: 6.5 (Medium)

BIG-IQ Configuration utility has an authenticated remote command execution vulnerability in undisclosed pages.