Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
prionPRIOn knowledge basePRION:CVE-2022-41622
HistoryDec 07, 2022 - 4:15 a.m.

Cross site request forgery (csrf)

2022-12-0704:15:00
PRIOn knowledge base
www.prio-n.com
5

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

8.7 High

AI Score

Confidence

High

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.422 Medium

EPSS

Percentile

97.2%

JSON

In all versions, BIG-IP and BIG-IQ are vulnerable to cross-site request forgery (CSRF) attacks through iControl SOAP. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

Related

f5 2
cve 1
checkpoint_advisories 1
nessus 1
hivepro 1
packetstorm 3
metasploit 4
zdt 2
rapid7blog 3
thn 1
attackerkb 1
trellix 2
f5
f5
K94221585 : iControl SOAP vulnerability CVE-2022-41622
2022-11-16 00:00:00
K97843387 : Overview of F5 vulnerabilities (November 2022)
2022-11-16 00:00:00
cve
cve
CVE-2022-41622
2022-12-07 04:15:00
checkpoint_advisories
checkpoint_advisories
F5 Big-IP Cross-Site Request Forgery (CVE-2022-41622)
2022-11-23 00:00:00
nessus
nessus
F5 Networks BIG-IP : iControl SOAP vulnerability (K94221585)
2022-11-16 00:00:00
hivepro
hivepro
RCE flaw in F5 BIG-IP and BIG-IQ
2022-11-18 08:42:14
packetstorm
packetstorm
F5 Big-IP Create Administrative User
2023-02-03 00:00:00
F5 BIG-IP iControl Remote Command Execution
2022-11-24 00:00:00
F5 BIG-IP iControl Cross Site Request Forgery
2022-11-21 00:00:00
metasploit
metasploit
F5 BIG-IP iControl CSRF File Write SOAP API
2022-11-16 19:58:15
F5 BIG-IP iControl Authenticated RCE via RPM Creator
2022-11-16 20:04:18
F5 Big-IP Create Admin User
2022-11-16 20:12:16
zdt
zdt
F5 Big-IP Create Administrative User Exploit
2023-02-03 00:00:00
F5 BIG-IP iControl Cross Site Request Forgery Exploit
2022-11-21 00:00:00
rapid7blog
rapid7blog
CVE-2022-41622 and CVE-2022-41800 (FIXED): F5 BIG-IP and iControl REST Vulnerabilities and Exposures
2022-11-16 15:00:00
CVE-2023-22374: F5 BIG-IP Format String Vulnerability
2023-02-01 15:57:57
Metasploit Weekly Wrap-Up
2022-11-25 17:14:15
thn
thn
High Severity Vulnerabilities Reported in F5 BIG-IP and BIG-IQ Devices
2022-11-17 06:58:00
attackerkb
attackerkb
CVE-2022-41800
2022-12-07 00:00:00
trellix
trellix
The Bug Report – November 2022 Edition
2022-12-07 00:00:00
The Bug Report – November 2022 Edition
2022-12-07 00:00:00

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

8.7 High

AI Score

Confidence

High

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.422 Medium

EPSS

Percentile

97.2%

JSON
Related for PRION:CVE-2022-41622
f52cve1checkpoint_advisories1nessus1hivepro1packetstorm3metasploit4zdt2rapid7blog3thn1attackerkb1trellix2