Cybersecurity Alerts

Actively Exploited Vulnerabilities

← Back to Cybersecurity Alerts

CVE-2021-22986

F5 | BIG-IP and BIG-IQ Centralized ManagementAdded 2021-11-03Remediation Deadline 2021-11-17Active Ransomware Campaign

F5 BIG-IP and BIG-IQ Centralized Management iControl REST Remote Code Execution Vulnerability

F5 BIG-IP and BIG-IQ Centralized Management contain a remote code execution vulnerability in the iControl REST interface that allows unauthenticated attackers with network access to execute system commands, create or delete files, and disable services.

Required Action

Apply updates per vendor instructions.

Weakness Classification

CWE-863

References