F5 BIG-IP Missing Authentication Vulnerability
Project:F5
Product:BIG-IP
Date Added:2022-05-10Due Date::2022-05-31
Vulnerability Name
F5 BIG-IP Missing Authentication Vulnerability
Description
F5 BIG-IP contains a missing authentication in critical function vulnerability which can allow for remote code execution, creation or deletion of files, or disabling services.
Known To Be Used in Ransomware Campaigns?
Known
Action
Apply updates per vendor instructions.
Additional Notes
https://nvd.nist.gov/vuln/detail/CVE-2022-1388
Related News Articles
U.S. Agencies Warn of Iranian Hacking Group's Ongoing Ransomware AttacksAugust 29, 2024
Iranian hackers work with ransomware gangs to extort breached orgsAugust 29, 2024
New BIG-IP Next Central Manager bugs allow device takeoverMay 9, 2024