F5 Networks: CVE-2023-22374: K000130415: iControl SOAP vulnerability CVE-2023-22374

F5 Networks: CVE-2023-22374: K000130415: iControl SOAP vulnerability CVE-2023-22374

Severity

8

CVSS

(AV:N/AC:H/Au:N/C:C/I:C/A:C)

Published

02/01/2023

Created

02/02/2023

Added

02/01/2023

Modified

08/23/2024

Description

A format string vulnerability exists in iControl SOAP that allows an authenticated attacker to crash the iControl SOAP CGI process or, potentially execute arbitrary code. In appliance mode BIG-IP, a successful exploit of this vulnerability can allow the attacker to cross a security boundary.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

Solution(s)

• f5-big-ip-upgrade-latest

References

• https://attackerkb.com/topics/cve-2023-22374
• CVE - 2023-22374
• https://my.f5.com/manage/s/article/K000130415