CVE-2023-22283

BIG-IP Edge Client for Windows vulnerability

CVSS 6.5 MEDIUMEPSS 0.2%CWE-427

Vexday Risk Score

13Baixo

Decisão SSVC (CISA)

Track

Sem sinal de exploração → monitorar

CVSS 6.5EPSS 0.2%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

01 fev 2023Publicada no NVD

Recomendação: Monitorar — sem sinal de exploração no momento.

On versions beginning in 7.1.5 to before 7.2.3.1, a DLL hijacking vulnerability exists in the BIG-IP Edge Client for Windows. User interaction and administrative privileges are required to exploit this vulnerability because the victim user needs to run the executable on the system and the attacker requires administrative privileges for modifying the files in the trusted search path. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H

Produtos afetados

F5 · APM Clients

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →

Referências

https://my.f5.com/manage/s/article/K07143733