refreshing-soap-exploit

这是 CVE-2022-41622 的概念验证，该漏洞是 F5 Big-IP 中的跨站请求伪造，可导致远程代码执行。使用起来有点麻烦，但我会带你了解我最喜欢的用例。 漏洞 核心漏洞是 F5 Big-IP SOAP 接口中的跨站请求伪造，该接口通过 /iControl/iControlPortal.cgi 访问，并且以 root 身份运行。但尽管是 root，我们仍受到 SELinux 策略的限制，这使得利用变得困难。不过，我们将在下面展示一些绕过方法。 SOAP 接口没有 CSRF 保护，这意味着攻击者可以利用经过身份验证的用户的会话执行任何支持的 SOAP 请求。已包含完整 WSDL...

F5 Big-IP Create Administrative User

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'unixcrypt' class MetasploitModule 'F5 Big-IP Create Admin User', 'Description' = %q This creates a local user with a username/password and root-level privileges...

K94221585: iControl SOAP vulnerability CVE-2022-41622

Security Advisory Description BIG-IP and BIG-IQ are vulnerable to cross-site request forgery CSRF attacks through iControl SOAP. CVE-2022-41622 Impact An attacker may trick users who have at least resource administrator role privilege and are authenticated through basic authentication in iControl...

CVE-2022-41622 iControl SOAP vulnerability

In all versions, BIG-IP and BIG-IQ are vulnerable to cross-site request forgery CSRF attacks through iControl SOAP. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

CVE-2022-41622

CVE-2022-41622 is a cross-site request forgery (CSRF) vulnerability in iControl SOAP affecting BIG-IP and BIG-IQ. An authenticated user with resource administrator privileges can trick the user into performing actions on the control plane. Affected versions include BIG-IP (17.x up to 17.0.0.2; 16...

F5 Big-IP Cross-Site Request Forgery (CVE-2022-41622)

A cross-site request forgery vulnerability exists in F5 Big-IP. Successful exploitation of this vulnerability could result in code execution on the affected system...

RCE flaw in F5 BIG-IP and BIG-IQ

Threat Level Vulnerability Report For a detailed threat advisory, download the pdf file here Summary Two security flaws in F5 BIG-IP and BIG-IQ can be exploited to enable remote code execution. An adversary could get persistent root access to the devices management interface by successfully...

CVE-2022-41622

creationtimestamp| type| source ---|---|--- 2022-11-17 12:36:05+00:00| seen| https://t.me/truesecator/3718 2022-11-17 21:29:01+00:00| seen| https://t.me/MrVGunz/589 2022-11-18 11:01:55+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/7195 2022-11-18 22:42:50+00:00| seen|...

High Severity Vulnerabilities Reported in F5 BIG-IP and BIG-IQ Devices

Multiple security vulnerabilities have been disclosed in F5 BIG-IP and BIG-IQ devices that, if successfully exploited, to completely compromise affected systems. Cybersecurity firm Rapid7 said the flaws could be abused to remote access to the devices and defeat security constraints. The issues...

CVE-2022-41622 and CVE-2022-41800 (FIXED): F5 BIG-IP and iControl REST Vulnerabilities and Exposures

Rapid7 discovered several vulnerabilities and exposures in F5 BIG-IP and BIG-IQ devices running a customized distribution of CentOS detailed in F5's Base Operating Systems support article. The affected products are detailed in the vendor advisories below: CVE-2022-41622: BIG-IP and BIG-IQ are...

F5 Networks BIG-IP : iControl SOAP vulnerability (K94221585)

The version of F5 Networks BIG-IP installed on the remote host is prior to 14.1.5.3 / 15.1.8.1 / 16.1.3.3 / 17.0.0.2 / 17.1.0. It is, therefore, affected by a vulnerability as referenced in the K94221585 advisory. BIG-IP and BIG-IQ are vulnerable to cross-site request forgery CSRF attacks through...