DLL Hijacking Vulnerability in BIG-IP Edge Client by F5 Networks
CVE-2021-23023

7.8HIGH

Key Information:

Vendor

F5
Status
Edge Client For Windows
Vendor
CVE Published:
10 June 2021

What is CVE-2021-23023?

A DLL hijacking vulnerability has been identified in the cachecleaner.dll file included with the BIG-IP Edge Client Windows Installer. This issue affects versions prior to 7.2.1.3 in the 7.2.1.x series and before 7.1.9.9 Update 1 in the 7.1.x series. Attackers could exploit this vulnerability to execute malicious code with elevated privileges, potentially compromising the security of affected systems. It's important to assess systems for the presence of these versions to mitigate risks appropriately.

Affected Version(s)

Edge Client for Windows 7.2.1.x before 7.2.1.3 and 7.1.x before 7.1.9.9 Update 1

References

https://support.f5.com/csp/article/K33757590
x_refsource_MISC

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.