CVE-2022-1388 — F5 BIG-IP Missing Authentication Vulnerability

provenance: imported · CVE: CVE-2022-1388

CVE-2022-1388: F5 BIG-IP Missing Authentication Vulnerability

CISA Known Exploited Vulnerability (KEV)


Vendor / project	F5
Product	BIG-IP
Date added	2022-05-10
Due date	2022-05-31
Ransomware campaign use	Known

Description

F5 BIG-IP contains a missing authentication in critical function vulnerability which can allow for remote code execution, creation or deletion of files, or disabling services.

Required action (CISA)

Apply updates per vendor instructions.

Notes

https://nvd.nist.gov/vuln/detail/CVE-2022-1388

References

NVD: https://nvd.nist.gov/vuln/detail/CVE-2022-1388
KEV catalog: https://www.cisa.gov/known-exploited-vulnerabilities-catalog