CVE-2022-34851

BIG-IP and BIG-IQ iControl SOAP vulnerability CVE-2022-34851

CVSS 4.3 MEDIUMEPSS 0.6%CWE-20

Vexday Risk Score

13Bajo

Decisión SSVC (CISA)

Track

Sin señal de explotación → monitorear

CVSS 4.3EPSS 0.6%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

04 ago 2022Publicada en NVD

Recomendación: Monitorear — sin señal de explotación por ahora.

In BIG-IP Versions 17.0.x before 17.0.0.1, 16.1.x before 16.1.3.1, 15.1.x before 15.1.6.1, 14.1.x before 14.1.5.1, and all versions of 13.1.x, and BIG-IQ Centralized Management all versions of 8.x, an authenticated attacker may cause iControl SOAP to become unavailable through undisclosed requests. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

Productos afectados

F5 · BIG-IP F5 · BIG-IQ Centralized Management

¿Quieres saber si tu infraestructura está expuesta a esto?

Hablar con TrueHacking →

Referencias

https://support.f5.com/csp/article/K50310001