CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2021-03-31
F5 BIG-IP and BIG-IQ iControl REST Unauthenticated Remote Code Execution (RCE) Vulnerability (CVE-2021-22986) Analysis and Mitigation Guide
[Affected Scope] F5 BIG-IP (16.0.x, 15.1.x, 14.1.x, 13.1.x, 12.1.x) and BIG-IQ (7.1.0.x, 7.0.0.x) management interfaces running iControl REST.
[Impact] Unauthenticated remote attackers can execute arbitrary system commands with elevated privileges, leading to complete compromise of the target device.
[Mitigation] Immediately upgrade to the patched versions provided by F5 and restrict access to the iControl REST interface (TCP 443) from untrusted networks.