Remote code execution

2022-10-1922:15:00

PRIOn knowledge base

www.prio-n.com

versions

advanced waf

asm module

authenticated

nvd

7.3 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

66.1%

JSON

In versions 16.1.x before 16.1.3.1, 15.1.x before 15.1.6.1, 14.1.x before 14.1.5.1, and 13.1.x before 13.1.5.1, When the Advanced WAF / ASM module is provisioned, an authenticated remote code execution vulnerability exists in the BIG-IP iControl REST interface.

CPENameOperatorVersion
big-ip_advanced_web_application_firewallge16.1.0
big-ip_advanced_web_application_firewalllt16.1.3.1
big-ip_advanced_web_application_firewallge15.1.0
big-ip_advanced_web_application_firewalllt15.1.6.1
big-ip_advanced_web_application_firewallge14.1.0
big-ip_advanced_web_application_firewalllt14.1.5.1
big-ip_advanced_web_application_firewallge13.1.0
big-ip_advanced_web_application_firewalllt13.1.5.1
big-ip_application_security_managerge14.1.0
big-ip_application_security_managerlt14.1.5.1

Name	Operator	Version
big-ip_advanced_web_application_firewall	ge	16.1.0
big-ip_advanced_web_application_firewall	lt	16.1.3.1
big-ip_advanced_web_application_firewall	ge	15.1.0
big-ip_advanced_web_application_firewall	lt	15.1.6.1
big-ip_advanced_web_application_firewall	ge	14.1.0
big-ip_advanced_web_application_firewall	lt	14.1.5.1
big-ip_advanced_web_application_firewall	ge	13.1.0
big-ip_advanced_web_application_firewall	lt	13.1.5.1
big-ip_application_security_manager	ge	14.1.0
big-ip_application_security_manager	lt	14.1.5.1

Rows per page:

1-10 of 161

References

support.f5.com/csp/article/K11830089