CVE-2023-22283

published 2023-02-01

CVE-2023-22283: On versions beginning in 7.1.5 to before 7.2.3.1, a DLL hijacking vulnerability exists in the BIG-IP Edge Client for Windows. User interaction and…

Priority P4 28 medium 6.5 CVSS 3.1

AV L AC L PR H UI R S U C H I H A H

On versions beginning in 7.1.5 to before 7.2.3.1, a DLL hijacking vulnerability exists in the BIG-IP Edge Client for Windows. User interaction and administrative privileges are required to exploit this vulnerability because the victim user needs to run the executable on the system and the attacker requires administrative privileges for modifying the files in the trusted search path. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

Affected

9 ranges

Vendor	Product	Version range	Fixed in
f5	apm_clients	>= 7.1.5 < 7.2.3.1	7.2.3.1
f5	big-ip_access_policy_manager	13.1.0 – 13.1.5	—
f5	big-ip_access_policy_manager	14.1.0 – 14.1.5	—
f5	big-ip_access_policy_manager	15.1.0 – 15.1.8	—
f5	big-ip_access_policy_manager	16.1.0 – 16.1.3	—
f5	big-ip_access_policy_manager	>= 17.0.0 < 17.0.0.2	17.0.0.2
f5	big-ip_access_policy_manager	>= 7.2.2 < 7.2.3.1	7.2.3.1
f5	big-ip_apm	—	—
f5	big-ip_edge	—	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-427