ACTIEF MISBRUIKT
CVE-2021-22986: F5 BIG-IP and BIG-IQ Centralized Management iControl REST Remote Code Execution Vulnerability
| Leverancier | F5 |
|---|---|
| Product | BIG-IP and BIG-IQ Centralized Management |
| Actief misbruikt | Ja |
| Toegevoegd aan CISA KEV | 3 nov 2021 |
| CISA-deadline (Amerikaanse overheid) | 17 nov 2021 |
| Gebruik door ransomware | Bekend |
| Zwakte (CWE) | CWE-863 |
Vereiste actie (tekst van CISA, Engels)
Apply updates per vendor instructions.
Beschrijving (NVD, Engels)
F5 BIG-IP and BIG-IQ Centralized Management contain a remote code execution vulnerability in the iControl REST interface that allows unauthenticated attackers with network access to execute system commands, create or delete files, and disable services.
BRONNEN
Andere lekken bij F5
- CVE-2026-94127: F5 BIG-IP APM Heap-based Buffer Overflow Vulnerability
- CVE-2025-53521: F5 BIG-IP Stack-Based Buffer Overflow Vulnerability
- CVE-2023-46748: F5 BIG-IP Configuration Utility SQL Injection Vulnerability
- CVE-2023-46747: F5 BIG-IP Configuration Utility Authentication Bypass Vulnerability
- CVE-2022-1388: F5 BIG-IP Missing Authentication Vulnerability
Gegevens van NVD, CISA KEV, FIRST EPSS en adviezen van leveranciers. Bijgewerkt 10 nov 2026.