CVE-2021-22986

Related Files

F5 BIG-IP 16.0.x Remote Code Execution

Posted Apr 2, 2021

Authored by Al1ex

F5 BIG-IP version 16.0.x suffers from an iControl REST remote code execution vulnerability.

tags | exploit, remote, code execution

advisories | CVE-2021-22986

MD5 | f45499daffe84f508ed80070af63ea45

Download | Favorite | View

F5 iControl Server-Side Request Forgery / Remote Command Execution

Posted Apr 1, 2021

Authored by wvu, Rich Warren | Site metasploit.com

This Metasploit module exploits a pre-authentication server-side request forgery vulnerability in the F5 iControl REST API's /mgmt/shared/authn/login endpoint to generate an X-F5-Auth-Token that can be used to execute root commands on an affected BIG-IP or BIG-IQ device.

tags | exploit, root

advisories | CVE-2021-22986

MD5 | babad085c5ec0276c04a4de6f8676674

Download | Favorite | View