coldbraid

CVE-2021-22986 F5 BIG-IP And BIG-IQ Centralized Management

F5 BIG-IP and BIG-IQ Centralized Management contain a remote code execution vulnerability in the iControl REST interface that allows unauthenticated attackers with network access to execute system commands, create or delete files, and disable services.

CVSS
not scored

CWE-863

On CISA’s exploited list

F5 BIG-IP and BIG-IQ Centralized Management iControl REST Remote Code Execution Vulnerability

Added
2021-11-03
Federal patch deadline
2021-11-17
Ransomware use
known