CVE-2021-22986

KEV · Ransomware

F5 BIG-IP and BIG-IQ Centralized Management iControl REST Remote Code Execution Vulnerability

Vendor / Project: F5
Product: BIG-IP and BIG-IQ Centralized Management
Date added: Nov 3, 2021
Due date: Nov 17, 2021
Known ransomware use: Known
CWEs: CWE-863

Description

F5 BIG-IP and BIG-IQ Centralized Management contain a remote code execution vulnerability in the iControl REST interface that allows unauthenticated attackers with network access to execute system commands, create or delete files, and disable services.

Required action

Apply updates per vendor instructions.

Notes

https://nvd.nist.gov/vuln/detail/CVE-2021-22986