cve/2022/CVE-2022-41780.md

### [CVE-2022-41780](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41780)
![](https://img.shields.io/static/v1?label=Product&message=F5OS-A&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=F5OS-C&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=1.x%3C%201.1.0%20&color=brighgreen)
![](https://img.shields.io/static/v1?label=Version&message=1.x%3C%201.4.0%20&color=brighgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-22%20Improper%20Limitation%20of%20a%20Pathname%20to%20a%20Restricted%20Directory%20('Path%20Traversal')&color=brighgreen)

### Description

In F5OS-A version 1.x before 1.1.0 and F5OS-C version 1.x before 1.4.0, a directory traversal vulnerability exists in an undisclosed location of the F5OS CLI that allows an attacker to read arbitrary files.

### POC

#### Reference
No PoCs from references.

#### Github
- https://github.com/karimhabush/cyberowl