GobyVuls/F5/CVE-2021-22986

CVE-2021-22986 F5 BIGIP iControl unauth RCE

F5 Big-IP, an application delivery platform for F5 Corporation, issued a security bulletin today, announcing seven security vulnerabilities related to Big-IP and Big-IQ.Among them, CVE-2021-22986 is an unauthenticated remote command execution vulnerability. Due to incomplete authentication of HTTP requests, it allows attackers to bypass permission authentication and access Big-IP REST API to execute commands by setting special HTTP headers.

Affected version: F5-BIGIP

FOFA query rule: title="BIG-IP" || app="F5-BIGIP"

Demo