Description
Details for this vulnerability have not been published by NIST at this point. Descriptions from software vendor advisories for this issue are provided below.From K18132488:This vulnerability allows authenticated users with network access to the Configuration utility, through the BIG-IP management port, or self IP addresses, to execute arbitrary system commands, create or delete files, or disable services. This vulnerability can only be exploited through the control plane and cannot be exploited through the data plane. Exploitation can lead to complete system compromise and breakout of Appliance mode. Appliance mode is enforced by a specific license or may be enabled or disabled for individual vCMP guest instances. For information on Appliance mode, refer to: K12815: Overview of Appliance mode.
Solution(s)
f5-big-ip-upgrade-latest
Referenceshttps://support.f5.com/csp/article/K02566623https://support.f5.com/csp/article/K18132488CVE-2021-22987
