K08510472: BIG-IP TMUI vulnerability CVE-2022-28695

Security Advisory Description An authenticated attacker with high privileges can upload a maliciously crafted file to the BIG-IP AFM Configuration utility, which allows an attacker to run arbitrary commands. CVE-2022-28695 Impact This vulnerability may allow an authenticated high-privilege attack...

CVE-2022-28695

On F5 BIG-IP AFM 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, and 13.1.x versions prior to 13.1.5, an authenticated attacker with high privileges can upload a maliciously crafted file to the BIG-IP AFM Configuration utility, which allows...

CVE-2022-28695

CVE-2022-28695 affects F5 BIG-IP AFM/ TMUI: an authenticated attacker with high privileges can upload a maliciously crafted file via the BIG-IP AFM Configuration utility to execute arbitrary commands on the system. Affected branches and fixes (per vendor advisory): BIG-IP AFM 16.1.x versions 16.1...

F5 Networks BIG-IP : BIG-IP TMUI vulnerability (K08510472)

The version of F5 Networks BIG-IP installed on the remote host is prior to 13.1.5 / 14.1.4.6 / 15.1.5.1 / 16.1.2.2 / 17.0.0. It is, therefore, affected by a vulnerability as referenced in the K08510472 advisory. - On F5 BIG-IP AFM 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to...