CVE-2021-22989 — F5 Big-ip Advanced Firewall Manager vulnerability

4 documents4 sources

Severity

9.1CRITICALNVD

EPSS

1.2%

top 21.24%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

F5 Big-ip Access Policy Manager F5 Big-ip Advanced Firewall Manager F5 Big-ip Advanced WEB Application Firewall +11 more

Timeline

PublishedMar 31

Latest updateMay 24

Description

On BIG-IP versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.2.1, 14.1.x before 14.1.4, 13.1.x before 13.1.3.6, 12.1.x before 12.1.5.3, and 11.6.x before 11.6.5.3, when running in Appliance mode with Advanced WAF or BIG-IP ASM provisioned, the TMUI, also referred to as the Configuration utility, has an authenticated remote command execution vulnerability in undisclosed pages. Note: Software versions which have reached End of Software Development (EoSD) are not evaluated.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:HExploitability: 2.3 | Impact: 6.0

Affected Packages14 packages

▶NVDf5/big-ip_advanced_firewall_manager11.6.1 — 11.6.5.3+5

▶NVDf5/big-ip_advanced_web_application_firewall11.6.1 — 11.6.5.3+5

▶NVDf5/big-ip_analytics11.6.1 — 11.6.5.3+5

▶NVDf5/ssl_orchestrator11.6.1 — 11.6.5.3+5

▶NVDf5/big-ip_link_controller11.6.1 — 11.6.5.3+5

🔴Vulnerability Details

GHSA

GHSA-86gp-vc79-86x4: On BIG-IP versions 16↗2022-05-24

▶

CVEList

CVE-2021-22989: On BIG-IP versions 16↗2021-03-31

▶

📋Vendor Advisories

CVE-2021-22989: On BIG-IP versions 16↗2021-03-31

▶

External resources

NVD MITRE

Affected products14

F5 Big-ip Access Policy Manager≥ 11.6.1, < 11.6.5.3≥ 12.1.0, < 12.1.5.3≥ 13.1.0, < 13.1.3.6+3 more

F5 Big-ip Advanced Firewall Manager≥ 11.6.1, < 11.6.5.3≥ 12.1.0, < 12.1.5.3≥ 13.1.0, < 13.1.3.6+3 more

F5 Big-ip Advanced WEB Application Firewall≥ 11.6.1, < 11.6.5.3≥ 12.1.0, < 12.1.5.3≥ 13.1.0, < 13.1.3.6+3 more

F5 Big-ip Analytics≥ 11.6.1, < 11.6.5.3≥ 12.1.0, < 12.1.5.3≥ 13.1.0, < 13.1.3.6+3 more

F5 Big-ip Application Acceleration Manager≥ 11.6.1, < 11.6.5.3≥ 12.1.0, < 12.1.5.3≥ 13.1.0, < 13.1.3.6+3 more

F5 Big-ip Application Security Manager≥ 11.6.1, < 11.6.5.3≥ 12.1.0, < 12.1.5.3≥ 13.1.0, < 13.1.3.6+3 more

F5 Big-ip Ddos Hybrid Defender≥ 11.6.1, < 11.6.5.3≥ 12.1.0, < 12.1.5.3≥ 13.1.0, < 13.1.3.6+3 more

F5 Big-ip Domain Name System≥ 11.6.1, < 11.6.5.3≥ 12.1.0, < 12.1.5.3≥ 13.1.0, < 13.1.3.6+3 more

F5 Big-ip Fraud Protection Service≥ 11.6.1, < 11.6.5.3≥ 12.1.0, < 12.1.5.3≥ 13.1.0, < 13.1.3.6+3 more

F5 Big-ip Global Traffic Manager≥ 11.6.1, < 11.6.5.3≥ 12.1.0, < 12.1.5.3≥ 13.1.0, < 13.1.3.6+3 more

Disclosure

PublishedMar 31, 2021

Latest updateMay 24, 2022