Lucene search

CVE-2022-41622

🗓️ 07 Dec 2022 04:10:15Reported by [email protected]Type

BIG-IP and BIG-IQ vulnerable to CSRF via iControl SOAP

AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Reporter	Title	Published	Views	Family All 24
Check Point Advisories	F5 Big-IP Cross-Site Request Forgery (CVE-2022-41622)	23 Nov 202200:00	–	checkpoint_advisories
F5 Networks	K94221585: iControl SOAP vulnerability CVE-2022-41622	16 Nov 202200:00	–	f5
F5 Networks	K97843387: Overview of F5 vulnerabilities (November 2022)	16 Nov 202200:00	–	f5
Cvelist	CVE-2022-41622 iControl SOAP vulnerability	7 Dec 202203:08	–	cvelist
CVE	CVE-2022-41622	7 Dec 202204:15	–	cve
Hive Pro Threat Advisories	RCE flaw in F5 BIG-IP and BIG-IQ	18 Nov 202208:42	–	hivepro
Tenable Nessus	F5 Networks BIG-IP : iControl SOAP vulnerability (K94221585)	16 Nov 202200:00	–	nessus
Prion	Cross site request forgery (csrf)	7 Dec 202204:15	–	prion
Packet Storm	F5 BIG-IP iControl Remote Command Execution	24 Nov 202200:00	–	packetstorm
Packet Storm	F5 Big-IP Create Administrative User	3 Feb 202300:00	–	packetstorm

Nvd

Node

f5 big-iq_centralized_managementRange8.0.0–8.2.0

f5 big-iq_centralized_managementMatch7.1.0

Node

f5 big-ip_advanced_firewall_managerRange13.1.0–13.1.5

f5 big-ip_advanced_firewall_managerRange14.1.0–14.1.5

f5 big-ip_advanced_firewall_managerRange15.1.0–15.1.8

f5 big-ip_advanced_firewall_managerRange16.1.0–16.1.3

f5 big-ip_advanced_firewall_managerMatch17.0.0

Node

f5 big-ip_analyticsRange13.1.0–13.1.5

f5 big-ip_analyticsRange14.1.0–14.1.5

f5 big-ip_analyticsRange15.1.0–15.1.8

f5 big-ip_analyticsRange16.1.0–16.1.3

f5 big-ip_analyticsMatch17.0.0

Node

f5 big-ip_access_policy_managerRange13.1.0–13.1.5

f5 big-ip_access_policy_managerRange14.1.0–14.1.5

f5 big-ip_access_policy_managerRange15.1.0–15.1.8

f5 big-ip_access_policy_managerRange16.1.0–16.1.3

f5 big-ip_access_policy_managerMatch17.0.0

Node

f5 big-ip_application_security_managerRange13.1.0–13.1.5

f5 big-ip_application_security_managerRange14.1.0–14.1.5

f5 big-ip_application_security_managerRange15.1.0–15.1.8

f5 big-ip_application_security_managerRange16.1.0–16.1.3

f5 big-ip_application_security_managerMatch17.0.0

Node

f5 big-ip_domain_name_systemRange13.1.0–13.1.5

f5 big-ip_domain_name_systemRange14.1.0–14.1.5

f5 big-ip_domain_name_systemRange15.1.0–15.1.8

f5 big-ip_domain_name_systemRange16.1.0–16.1.3

f5 big-ip_domain_name_systemMatch17.0.0

Node

f5 big-ip_fraud_protection_serviceRange13.1.0–13.1.5

f5 big-ip_fraud_protection_serviceRange14.1.0–14.1.5

f5 big-ip_fraud_protection_serviceRange15.1.0–15.1.8

f5 big-ip_fraud_protection_serviceRange16.1.0–16.1.3

f5 big-ip_fraud_protection_serviceMatch17.0.0

Node

f5 big-ip_global_traffic_managerRange13.1.0–13.1.5

f5 big-ip_global_traffic_managerRange14.1.0–14.1.5

f5 big-ip_global_traffic_managerRange15.1.0–15.1.8

f5 big-ip_global_traffic_managerRange16.1.0–16.1.3

f5 big-ip_global_traffic_managerMatch17.0.0

Node

f5 big-ip_link_controllerRange13.1.0–13.1.5

f5 big-ip_link_controllerRange14.1.0–14.1.5

f5 big-ip_link_controllerRange15.1.0–15.1.8

f5 big-ip_link_controllerRange16.1.0–16.1.3

f5 big-ip_link_controllerMatch17.0.0

Node

f5 big-ip_local_traffic_managerRange13.1.0–13.1.5

f5 big-ip_local_traffic_managerRange14.1.0–14.1.5

f5 big-ip_local_traffic_managerRange15.1.0–15.1.8

f5 big-ip_local_traffic_managerRange16.1.0–16.1.3

f5 big-ip_local_traffic_managerMatch17.0.0

Node

f5 big-ip_policy_enforcement_managerRange13.1.0–13.1.5

f5 big-ip_policy_enforcement_managerRange14.1.0–14.1.5

f5 big-ip_policy_enforcement_managerRange15.1.0–15.1.8

f5 big-ip_policy_enforcement_managerRange16.1.0–16.1.3

f5 big-ip_policy_enforcement_managerMatch17.0.0

Node

f5 big-ip_application_acceleration_managerRange13.1.0–13.1.5

f5 big-ip_application_acceleration_managerRange14.1.0–14.1.5

f5 big-ip_application_acceleration_managerRange15.1.0–15.1.8

f5 big-ip_application_acceleration_managerRange16.1.0–16.1.3

f5 big-ip_application_acceleration_managerMatch17.0.0

Source	Link
support	www.support.f5.com/csp/article/K94221585

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

07 Dec 2022 04:15Current

CVSS38.8

EPSS0.81263

CWE-352