CVE-2023-22374 Information

Description

In BIG-IP starting in versions 17.0.0 16.1.2.2 15.1.5.1 14.1.4.6 and 13.1.5 on their respective branches a format string vulnerability exists in iControl SOAP that allows an authenticated attacker to crash the iControl SOAP CGI process or potentially execute arbitrary code. In appliance mode BIG-IP a successful exploit of this vulnerability can allow the attacker to cross a security boundary. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

Reference

https://my.f5.com/manage/s/article/K000130415