iControl SOAP vulnerability

BIG-IP and BIG-IQ systems can be attacked through iControl SOAP, where a malicious website tricks an authenticated user into performing unwanted actions without their knowledge. This allows attackers to manipulate critical network and security configurations.

CSRF vulnerability in iControl SOAP interface affecting BIG-IP and BIG-IQ, exploitable via malicious web pages against authenticated administrators. Attack requires victim to visit attacker-controlled site while maintaining active session; successful exploitation enables unauthorized modification of system configurations and security policies.