vulnerability

F5 Networks: CVE-2022-28714: K54460845: BIG-IP Edge Client for Windows vulnerability CVE-2022-28714

Try Surface Command

Back to search

Severity

CVSS

(AV:L/AC:M/Au:N/C:P/I:P/A:P)

Published

May 4, 2022

Added

May 5, 2022

Modified

Mar 26, 2026

Description

On F5 BIG-IP APM 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13.1.x versions prior to 13.1.5, and all versions of 12.1.x and 11.6.x, as well as F5 BIG-IP APM Clients 7.x versions prior to 7.2.1.5, a DLL Hijacking vulnerability exists in the BIG-IP Edge Client Windows Installer. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated

Solution

f5-big-ip-upgrade-latest

References

CVE-2022-28714
https://attackerkb.com/topics/CVE-2022-28714
CWE-427
https://my.f5.com/manage/s/article/K54460845

Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.

Get report