K68652018: iControl REST vulnerability CVE-2021-22974

🗓️ 21 Feb 2023 19:30:39Reported by f5Type

f5🔗 my.f5.com👁 24 Views

Authenticated attacker can exploit iControl REST vulnerability CVE-2021-22974 to execute commands with elevated privilege level, due to incomplete fix for CVE-2017-6167

Reporter	Title	Published	Views	Family All 11
Circl	CVE-2021-22974	12 Feb 202120:43	–	circl
CNNVD	BIG-IP 竞争条件问题漏洞	11 Feb 202100:00	–	cnnvd
CNVD	BIG-IP Competitive Conditions Issue Vulnerability (CNVD-2021-13215)	25 Feb 202100:00	–	cnvd
CVE	CVE-2021-22974	12 Feb 202116:23	–	cve
Cvelist	CVE-2021-22974	12 Feb 202116:23	–	cvelist
EUVD	EUVD-2021-10092	7 Oct 202500:30	–	euvd
Tenable Nessus	F5 Networks BIG-IP : iControl REST vulnerability (K68652018)	11 Feb 202100:00	–	nessus
NCSC	Multiple vulnerabilities fixed in F5 BIG-IP products	11 Feb 202100:00	–	ncsc
NVD	CVE-2021-22974	12 Feb 202117:15	–	nvd
Prion	Race condition	12 Feb 202117:15	–	prion

Vulners

Node

f5 big-ip_ltmRange16.0.0–16.0.1

OR

f5 big-ip_aamRange16.0.0–16.0.1

OR

f5 big-ip_advanced_wafRange16.0.0–16.0.1

OR

f5 big-ip_afmRange16.0.0–16.0.1

OR

f5 big-ip_analyticsRange16.0.0–16.0.1

OR

f5 big-ip_apmRange16.0.0–16.0.1

OR

f5 big-ip_asmRange16.0.0–16.0.1

OR

f5 big-ip_ddhdRange16.0.0–16.0.1

OR

f5 big-ip_dnsRange16.0.0–16.0.1

OR

f5 big-ip_fpsRange16.0.0–16.0.1

OR

f5 big-ip_gtmRange16.0.0–16.0.1

OR

f5 big-ip_link_controllerRange16.0.0–16.0.1

OR

f5 big-ip_pemRange16.0.0–16.0.1

OR

f5 big-ip_ssloRange16.0.0–16.0.1

OR

f5 big-ip_ltmRange15.1.0–15.1.1

OR

f5 big-ip_aamRange15.1.0–15.1.1

OR

f5 big-ip_advanced_wafRange15.1.0–15.1.1

OR

f5 big-ip_afmRange15.1.0–15.1.1

OR

f5 big-ip_analyticsRange15.1.0–15.1.1

OR

f5 big-ip_apmRange15.1.0–15.1.1

OR

f5 big-ip_asmRange15.1.0–15.1.1

OR

f5 big-ip_ddhdRange15.1.0–15.1.1

OR

f5 big-ip_dnsRange15.1.0–15.1.1

OR

f5 big-ip_fpsRange15.1.0–15.1.1

OR

f5 big-ip_gtmRange15.1.0–15.1.1

OR

f5 big-ip_link_controllerRange15.1.0–15.1.1

OR

f5 big-ip_pemRange15.1.0–15.1.1

OR

f5 big-ip_ssloRange15.1.0–15.1.1

OR

f5 big-ip_ltmRange14.1.0–14.1.3

OR

f5 big-ip_aamRange14.1.0–14.1.3

OR

f5 big-ip_advanced_wafRange14.1.0–14.1.3

OR

f5 big-ip_afmRange14.1.0–14.1.3

OR

f5 big-ip_analyticsRange14.1.0–14.1.3

OR

f5 big-ip_apmRange14.1.0–14.1.3

OR

f5 big-ip_asmRange14.1.0–14.1.3

OR

f5 big-ip_ddhdRange14.1.0–14.1.3

OR

f5 big-ip_dnsRange14.1.0–14.1.3

OR

f5 big-ip_fpsRange14.1.0–14.1.3

OR

f5 big-ip_gtmRange14.1.0–14.1.3

OR

f5 big-ip_link_controllerRange14.1.0–14.1.3

OR

f5 big-ip_pemRange14.1.0–14.1.3

OR

f5 big-ip_ssloRange14.1.0–14.1.3

OR

f5 big-ip_ltmRange13.1.0–13.1.3

OR

f5 big-ip_aamRange13.1.0–13.1.3

OR

f5 big-ip_advanced_wafRange13.1.0–13.1.3

OR

f5 big-ip_afmRange13.1.0–13.1.3

OR

f5 big-ip_analyticsRange13.1.0–13.1.3

OR

f5 big-ip_apmRange13.1.0–13.1.3

OR

f5 big-ip_asmRange13.1.0–13.1.3

OR

f5 big-ip_ddhdRange13.1.0–13.1.3

OR

f5 big-ip_dnsRange13.1.0–13.1.3

OR

f5 big-ip_fpsRange13.1.0–13.1.3

OR

f5 big-ip_gtmRange13.1.0–13.1.3

OR

f5 big-ip_link_controllerRange13.1.0–13.1.3

OR

f5 big-ip_pemRange13.1.0–13.1.3

OR

f5 big-ip_ssloRange13.1.0–13.1.3

OR

f5 big-iq_centralized_managementRange8.0.0–8.4.0

OR

f5 big-iq_centralized_managementRange7.0.0–7.1.0

OR

f5 big-iq_centralized_managementRange6.0.0–6.1.0

09 Feb 2026 07:46Current

6.8Medium risk

Vulners AI Score6.8

CVSS 26

CVSS 3.17.5

EPSS0.00326

icontrol rest cve-2021-22974 race condition elevated privilege incomplete fix cve-2017-6167 restricted information modify files denial-of-service