Description
F5 BIG-IP and BIG-IQ Centralized Management contain a remote code execution vulnerability in the iControl REST interface that allows unauthenticated attackers with network access to execute system commands, create or delete files, and disable services.
Full record on cve.org →Affected packages
| Package | Vendor / Product | Version range | Status |
|---|---|---|---|
| BIG-IP; BIG-IQ | n/a / BIG-IP; BIG-IQ | BIG-IP 16.0.x before 16.0.1.1, 15.1.x before 15.1.2.1, 14.1.x before 14.1.4, 13.1.x before 13.1.3.6, 12.1.x before 12.1.5.3 | affected |
| BIG-IP; BIG-IQ | n/a / BIG-IP; BIG-IQ | BIG-IQ 7.1.0.x before 7.1.0.3, 7.0.0.x before 7.0.0.2 | affected |