CVE-2021-22986

Воздействие уязвимости Эта уязвимость позволяет неаутентифицированным злоумышленникам, имеющим сетевой доступ к интерфейсу iControl REST через интерфейс управления BIG-IP и собственные IP-адреса, выполнять произвольные системные команды, создавать или удалять файлы, а также отключать службы. Данн...

CVE-2022-1388

Impatto della vulnerabilità Questa vulnerabilità potrebbe consentire a un attaccante non autenticato con accesso di rete al sistema BIG-IP attraverso la porta di gestione e/o gli indirizzi IP propri di eseguire comandi arbitrari di sistema, creare o eliminare file, o disabilitare servizi. Prodott...

CVE-2021-22986

CVE-2021-22986 F5 BIG-IP/BIG-IQ iControl Rest API SSRF से RCE उपयोग: root@kitploit: python CVE-2021-22986.py...

F5 BIG-IP和F5 BIG-IQ 安全漏洞

F5 BIG-IP and F5 BIG-IQ are both products from the American company F5. F5 BIG-IP is an application delivery platform that integrates functions such as network traffic management, application security management, and load balancing. F5 BIG-IQ is a software-based cloud management solution. This...

F5 BIG-IP和F5 BIG-IQ 信息泄露漏洞

F5 BIG-IP and F5 BIG-IQ are both products from the American company F5. F5 BIG-IP is an application delivery platform that integrates functions such as network traffic management, application security management, and load balancing. F5 BIG-IQ is a software-based cloud management solution. This...

F5 BIG-IP和F5 BIG-IQ 安全漏洞

F5 BIG-IP and F5 BIG-IQ are both products from the American company F5. F5 BIG-IP is an application delivery platform that integrates functions such as network traffic management, application security management, and load balancing. F5 BIG-IQ is a software-based cloud management solution. This...

EUVD-2017-15217

Malware in sbrugna...

EUVD-2015-4656

Malware in sbrugna...

CVE-2024-47139

A stored XSS in BIG-IQ is present on an undisclosed page of the BIG-IQ Configuration utility that can be exploited by an Administrator to run JavaScript in the user’s context. Connected sources specify affected targets as BIG-IQ Centralized Management (BIG-IQ UI) and BIG-IP BIG-IQ components, wit...

PT-2023-22217

Name of the Vulnerable Software and Affected Versions F5 BIG-IQ affected versions not specified Description An authenticated attacker granted a Viewer or Auditor role on a BIG-IQ can upload arbitrary files using an undisclosed iControl REST endpoint. Recommendations At the moment, there is no...

K15229: BIG-IQ / BIG-IP privilege escalation vulnerability CVE-2014-3220

Security Advisory Description F5 BIG-IQ Cloud and Security 4.0.0 through 4.1.0 allows remote authenticated users to change the password of arbitrary users via the name parameter in a request to the user's page in mgmt/shared/authz/users/. CVE-2014-3220 Impact An authenticated user with limited...

K41043270: Intel processor vulnerabilities CVE-2021-0086 and CVE-2021-0089

Security Advisory Description CVE-2021-0086 Observable response discrepancy in floating-point operations for some IntelR Processors may allow an authorized user to potentially enable information disclosure via local access. CVE-2021-0089 Observable response discrepancy in some IntelR Processors m...

RCE flaw in F5 BIG-IP and BIG-IQ

Threat Level Vulnerability Report For a detailed threat advisory, download the pdf file here Summary Two security flaws in F5 BIG-IP and BIG-IQ can be exploited to enable remote code execution. An adversary could get persistent root access to the devices management interface by successfully...

PT-2022-26030 · F5 · F5 Big-Ip +1

Name of the Vulnerable Software and Affected Versions: F5 BIG-IP versions 13.1.x through 16.1.2 F5 BIG-IP versions 14.1.x through 14.1.4 F5 BIG-IP versions 15.1.x through 15.1.6 F5 BIG-IQ versions 7.x through 8.1.0 Description: When an SSL key is imported on a BIG-IP or BIG-IQ system, undisclosed...

PT-2022-26062 · F5 · F5 Big-Ip +1

Name of the Vulnerable Software and Affected Versions: F5 BIG-IP versions 13.1.x through 17.0.x before 17.0.0.1 F5 BIG-IP versions 14.1.x through 14.1.x before 14.1.5.1 F5 BIG-IP versions 15.1.x through 15.1.x before 15.1.7 F5 BIG-IP versions 16.1.x through 16.1.x before 16.1.3.1 F5 BIG-IQ versio...

PT-2022-22391 · Amazon +1 · Amazon Web Services +4

Name of the Vulnerable Software and Affected Versions: F5 BIG-IP versions 15.1.x through 15.1.6.0 F5 BIG-IP versions 16.1.x through 16.1.3.0 F5 BIG-IQ versions 8.x Description: The issue arises when the Data Plane Development Kit DPDK/Elastic Network Adapter ENA driver is used with BIG-IP or BIG-...

PT-2022-4130 · F5 · F5 Big-Ip +1

Name of the Vulnerable Software and Affected Versions: F5 BIG-IP versions 13.1.x F5 BIG-IP versions 14.1.x through 14.1.5.0 F5 BIG-IP versions 15.1.x through 15.1.6.0 F5 BIG-IP versions 16.1.x through 16.1.3.0 F5 BIG-IP versions 17.0.x through 17.0.0.0 F5 BIG-IQ versions 7.x F5 BIG-IQ versions 8....

CVE-2022-26340

On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13.1.x versions prior to 13.1.5, and all versions of 12.1.x and 11.6.x, and F5 BIG-IQ Centralized Management all versions of 8.x and 7.x, an authenticated, high-privileged attacke...

Code injection

On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13.1.x versions prior to 13.1.5, and all versions of 12.1.x and 11.6.x, and F5 BIG-IQ Centralized Management all versions of 8.x and 7.x, an authenticated, high-privileged attacke...

CVE-2022-26340

On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13.1.x versions prior to 13.1.5, and all versions of 12.1.x and 11.6.x, and F5 BIG-IQ Centralized Management all versions of 8.x and 7.x, an authenticated, high-privileged attacke...