Lucene search

[email protected]NVD:CVE-2021-22988

HistoryMar 31, 2021 - 3:15 p.m.

CVE-2021-22988

2021-03-3115:15:15

[email protected]

web.nvd.nist.gov

big-ip

authenticated

command execution

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:C/I:C/A:C

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

0.002

Percentile

52.5%

JSON

On BIG-IP versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.2.1, 14.1.x before 14.1.4, 13.1.x before 13.1.3.6, 12.1.x before 12.1.5.3, and 11.6.x before 11.6.5.3, TMUI, also referred to as the Configuration utility, has an authenticated remote command execution vulnerability in undisclosed pages. Note: Software versions which have reached End of Software Development (EoSD) are not evaluated.

Affected configurations

Nvd

Node

f5big-ip_access_policy_managerRange11.6.1–11.6.5.3

f5big-ip_access_policy_managerRange12.1.0–12.1.5.3

f5big-ip_access_policy_managerRange13.1.0–13.1.3.6

f5big-ip_access_policy_managerRange14.1.0–14.1.4

f5big-ip_access_policy_managerRange15.1.0–15.1.2.1

f5big-ip_access_policy_managerRange16.0.0–16.0.1.1

f5big-ip_advanced_firewall_managerRange11.6.1–11.6.5.3

f5big-ip_advanced_firewall_managerRange12.1.0–12.1.5.3

f5big-ip_advanced_firewall_managerRange13.1.0–13.1.3.6

f5big-ip_advanced_firewall_managerRange14.1.0–14.1.4

f5big-ip_advanced_firewall_managerRange15.1.0–15.1.2.1

f5big-ip_advanced_firewall_managerRange16.0.0–16.0.1.1

f5big-ip_advanced_web_application_firewallRange11.6.1–11.6.5.3

f5big-ip_advanced_web_application_firewallRange12.1.0–12.1.5.3

f5big-ip_advanced_web_application_firewallRange13.1.0–13.1.3.6

f5big-ip_advanced_web_application_firewallRange14.1.0–14.1.4

f5big-ip_advanced_web_application_firewallRange15.1.0–15.1.2.1

f5big-ip_advanced_web_application_firewallRange16.0.0–16.0.1.1

f5big-ip_analyticsRange11.6.1–11.6.5.3

f5big-ip_analyticsRange12.1.0–12.1.5.3

f5big-ip_analyticsRange13.1.0–13.1.3.6

f5big-ip_analyticsRange14.1.0–14.1.4

f5big-ip_analyticsRange15.1.0–15.1.2.1

f5big-ip_analyticsRange16.0.0–16.0.1.1

f5big-ip_application_acceleration_managerRange11.6.1–11.6.5.3

f5big-ip_application_acceleration_managerRange12.1.0–12.1.5.3

f5big-ip_application_acceleration_managerRange13.1.0–13.1.3.6

f5big-ip_application_acceleration_managerRange14.1.0–14.1.4

f5big-ip_application_acceleration_managerRange15.1.0–15.1.2.1

f5big-ip_application_acceleration_managerRange16.0.0–16.0.1.1

f5big-ip_application_security_managerRange11.6.1–11.6.5.3

f5big-ip_application_security_managerRange12.1.0–12.1.5.3

f5big-ip_application_security_managerRange13.1.0–13.1.3.6

f5big-ip_application_security_managerRange14.1.0–14.1.4

f5big-ip_application_security_managerRange15.1.0–15.1.2.1

f5big-ip_application_security_managerRange16.0.0–16.0.1.1

f5big-ip_ddos_hybrid_defenderRange11.6.1–11.6.5.3

f5big-ip_ddos_hybrid_defenderRange12.1.0–12.1.5.3

f5big-ip_ddos_hybrid_defenderRange13.1.0–13.1.3.6

f5big-ip_ddos_hybrid_defenderRange14.1.0–14.1.4

f5big-ip_ddos_hybrid_defenderRange15.1.0–15.1.2.1

f5big-ip_ddos_hybrid_defenderRange16.0.0–16.0.1.1

f5big-ip_domain_name_systemRange11.6.1–11.6.5.3

f5big-ip_domain_name_systemRange12.1.0–12.1.5.3

f5big-ip_domain_name_systemRange13.1.0–13.1.3.6

f5big-ip_domain_name_systemRange14.1.0–14.1.4

f5big-ip_domain_name_systemRange15.1.0–15.1.2.1

f5big-ip_domain_name_systemRange16.0.0–16.0.1.1

f5big-ip_fraud_protection_serviceRange11.6.1–11.6.5.3

f5big-ip_fraud_protection_serviceRange12.1.0–12.1.5.3

f5big-ip_fraud_protection_serviceRange13.1.0–13.1.3.6

f5big-ip_fraud_protection_serviceRange14.1.0–14.1.4

f5big-ip_fraud_protection_serviceRange15.1.0–15.1.2.1

f5big-ip_fraud_protection_serviceRange16.0.0–16.0.1.1

f5big-ip_global_traffic_managerRange11.6.1–11.6.5.3

f5big-ip_global_traffic_managerRange12.1.0–12.1.5.3

f5big-ip_global_traffic_managerRange13.1.0–13.1.3.6

f5big-ip_global_traffic_managerRange14.1.0–14.1.4

f5big-ip_global_traffic_managerRange15.1.0–15.1.2.1

f5big-ip_global_traffic_managerRange16.0.0–16.0.1.1

f5big-ip_link_controllerRange11.6.1–11.6.5.3

f5big-ip_link_controllerRange12.1.0–12.1.5.3

f5big-ip_link_controllerRange13.1.0–13.1.3.6

f5big-ip_link_controllerRange14.1.0–14.1.4

f5big-ip_link_controllerRange15.1.0–15.1.2.1

f5big-ip_link_controllerRange16.0.0–16.0.1.1

f5big-ip_local_traffic_managerRange11.6.1–11.6.5.3

f5big-ip_local_traffic_managerRange12.1.0–12.1.5.3

f5big-ip_local_traffic_managerRange13.1.0–13.1.3.6

f5big-ip_local_traffic_managerRange14.1.0–14.1.4

f5big-ip_local_traffic_managerRange15.1.0–15.1.2.1

f5big-ip_local_traffic_managerRange16.0.0–16.0.1.1

f5big-ip_policy_enforcement_managerRange11.6.1–11.6.5.3

f5big-ip_policy_enforcement_managerRange12.1.0–12.1.5.3

f5big-ip_policy_enforcement_managerRange13.1.0–13.1.3.6

f5big-ip_policy_enforcement_managerRange14.1.0–14.1.4

f5big-ip_policy_enforcement_managerRange15.1.0–15.1.2.1

f5big-ip_policy_enforcement_managerRange16.0.0–16.0.1.1

f5ssl_orchestratorRange11.6.1–11.6.5.3

f5ssl_orchestratorRange12.1.0–12.1.5.3

f5ssl_orchestratorRange13.1.0–13.1.3.6

f5ssl_orchestratorRange14.1.0–14.1.4

f5ssl_orchestratorRange15.1.0–15.1.2.1

f5ssl_orchestratorRange16.0.0–16.0.1.1

VendorProductVersionCPE
f5big-ip_access_policy_manager*cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*
f5big-ip_advanced_firewall_manager*cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*
f5big-ip_advanced_web_application_firewall*cpe:2.3:a:f5:big-ip_advanced_web_application_firewall:*:*:*:*:*:*:*:*
f5big-ip_analytics*cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*
f5big-ip_application_acceleration_manager*cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*
f5big-ip_application_security_manager*cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*
f5big-ip_ddos_hybrid_defender*cpe:2.3:a:f5:big-ip_ddos_hybrid_defender:*:*:*:*:*:*:*:*
f5big-ip_domain_name_system*cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*
f5big-ip_fraud_protection_service*cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:*
f5big-ip_global_traffic_manager*cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
f5	big-ip_access_policy_manager	*	cpe:2.3:a:f5:big-ip_access_policy_manager::::::::
f5	big-ip_advanced_firewall_manager	*	cpe:2.3:a:f5:big-ip_advanced_firewall_manager::::::::
f5	big-ip_advanced_web_application_firewall	*	cpe:2.3:a:f5:big-ip_advanced_web_application_firewall::::::::
f5	big-ip_analytics	*	cpe:2.3:a:f5:big-ip_analytics::::::::
f5	big-ip_application_acceleration_manager	*	cpe:2.3:a:f5:big-ip_application_acceleration_manager::::::::
f5	big-ip_application_security_manager	*	cpe:2.3:a:f5:big-ip_application_security_manager::::::::
f5	big-ip_ddos_hybrid_defender	*	cpe:2.3:a:f5:big-ip_ddos_hybrid_defender::::::::
f5	big-ip_domain_name_system	*	cpe:2.3:a:f5:big-ip_domain_name_system::::::::
f5	big-ip_fraud_protection_service	*	cpe:2.3:a:f5:big-ip_fraud_protection_service::::::::
f5	big-ip_global_traffic_manager	*	cpe:2.3:a:f5:big-ip_global_traffic_manager::::::::