Skip to content
Sign in
7.2 High

CVE-2022-41617 In versions 16.1.x before 16.1.3.1, 15.1.x before 15.1.6.1, 14.1.x before 14.1.5.1, and 13.1.x before 13.1.5.1, When the…

Description

In versions 16.1.x before 16.1.3.1, 15.1.x before 15.1.6.1, 14.1.x before 14.1.5.1, and 13.1.x before 13.1.5.1, When the Advanced WAF / ASM module is provisioned, an authenticated remote code execution vulnerability exists in the BIG-IP iControl REST interface.

Affected products and versions

Product Affected versions Fixed in
BIG-IP Advanced WAF & ASM 17.0 earliest → < 17.0.0 17.0.0
BIG-IP Advanced WAF & ASM 16.1 16.1.x → < 16.1.3.1 16.1.3.1
BIG-IP Advanced WAF & ASM 15.1 15.1.x → < 15.1.6.1 15.1.6.1
BIG-IP Advanced WAF & ASM 14.1 14.1.x → < 14.1.5.1 14.1.5.1
BIG-IP Advanced WAF & ASM 13.1 13.1.x → < 13.1.5.1 13.1.5.1

Other CVEs of BIG-IP Advanced WAF & ASM

The 3 CVEs of BIG-IP Advanced WAF & ASM →
CVE-2022-41836 When an 'Attack Signature False Positive Mode' enabled security policy is configured on a virtual server, undisclosed… 7.5 High CVE-2022-41691 When a BIG-IP Advanced WAF/ASM security policy is configured on a virtual server, undisclosed requests can cause the… 7.5 High
Track this CVE