CVE-2021-22986
F5 BIG-IP and BIG-IQ Centralized Management iControl REST Remote Code Execution Vulnerability
CVSS
—
Sem CVSS
EPSS
99.9%
p100
KEV
SIM
3 de nov. de 2021
Exploit Today
80
0-100
Publicado: — · Última mod.: —
Produto
F5 / BIG-IP and BIG-IQ Centralized Management
Vulnerabilidade
F5 BIG-IP and BIG-IQ Centralized Management iControl REST Remote Code Execution Vulnerability
Adicionado ao KEV
3 de nov. de 2021
Corrigir até
17 de nov. de 2021
Uso conhecido em ransomware
Sim
Descrição resumida
F5 BIG-IP and BIG-IQ Centralized Management contain a remote code execution vulnerability in the iControl REST interface that allows unauthenticated attackers with network access to execute system commands, create or delete files, and disable services.
Ação necessária
Apply updates per vendor instructions.
Notas
https://nvd.nist.gov/vuln/detail/CVE-2021-22986
Nenhum CVE relacionado por CWE ou produto.