vulnerability

F5 Networks: CVE-2024-22093: K000137522: BIG-IP iControl REST vulnerability CVE-2024-22093

Severity
9
CVSS
(AV:N/AC:L/Au:S/C:C/I:C/A:N)
Published
02/14/2024
Added
03/07/2024
Modified
01/28/2025

Description

When running in appliance mode, an authenticated remote command injection vulnerability exists in an undisclosed iControl REST endpoint on multi-bladed systems. A successful exploit can allow the attacker to cross a security boundary.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated

Solution

f5-big-ip-upgrade-latest
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.