3 matches found
K56142644: Appliance mode Advanced WAF/ASM TMUI authenticated remote command execution vulnerability CVE-2021-22989
Security Advisory Description When running in Appliance mode with Advanced WAF or ASM provisioned, the Traffic Management User Interface TMUI, also referred to as the Configuration utility, has an authenticated remote command execution vulnerability in undisclosed pages. CVE-2021-22989 Note : For...
9.1CVSS7.2AI score0.08838EPSS
SaveExploits1Affected Software2
CVE-2021-22989
CVE-2021-22989 affects BIG-IP appliances in Appliance mode with Advanced WAF/ASM, where TMUI (Configuration utility) can be abused via authenticated remote command execution in undisclosed pages. Affected versions include 16.0.x before 16.0.1.1, 15.1.x before 15.1.2.1, 14.1.x before 14.1.4, 13.1....
9.1CVSS9.1AI score0.08838EPSS
SaveExploits1References1Affected Software14
20