#f5 BIG-IP Unauthenticated RCE Vulnerability

F5 BIG-IP Unauthenticated RCE Vulnerability (CVE-2022-1388)

16.1.x versions prior to 16.1.2.2
15.1.x versions prior to 15.1.5.1
14.1.x versions prior to 14.1.4.6
13.1.x versions prior to 13.1.5
All 12.1.x and 11.6.x versions
An unauthenticated actor with network access to the BIG-IP system through the management port or self IP addresses could exploit the vulnerability to execute arbitrary system commands, create or delete files, or disable services. F5 released a patch for CVE-2022-1388 for all affected versions—except 12.1.x and 11.6.x versions—on May 4, 2022 (12.1.x and 11.6.x versions are end of life [EOL], and F5 has stated they will not release patches)

#bigip #f5 #exploit #cve #cvepoc #cybersecurity #bugbounty #bugbountyhunter #vulnerability #vulnerable #pentester #pentest