Testing for F5 Networks BIG-IP vulnerability (CVE-2022-1388)

Background CVE-2022-1388 is a critical vulnerability (CVSS 9.8) in the management interface of F5 Networks’ BIG-IP solution that enables an unauthenticated attacker to gain remote code execution on the system through bypassing F5’s iControl REST authentication. The vulnerability was disclosed publicly on 4 May 2022. Links https://arstechnica.com/information-technology/2022/05/hackers-are-actively-exploiting-big-ip-vulnerability-with-a-9-8-severity-rating/. Testing A bash script to test for CVE-2022-1388 was published at https://www.
Read full post gblog_arrow_right