Undisclosed iControl REST Endpoint Vulnerability Allows Crossing Security Boundaries

CVE-2024-22093

What is CVE-2024-22093?

An authenticated remote command injection vulnerability exists in a specific iControl REST endpoint within F5 Networks’ multi-bladed systems when running in appliance mode. Successful exploitation of this vulnerability can enable an attacker to cross security boundaries, potentially leading to unauthorized access and control over the system. It is important to note that software versions that have reached End of Technical Support (EoTS) are not evaluated for this vulnerability, emphasizing the necessity for organizations to maintain supported versions of their F5 products to mitigate potential risks.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References