Security News > 2022 > May > Attackers are attempting to exploit critical F5 BIG-IP RCE

Researchers have developed PoC exploits for CVE-2022-1388, a critical remote code execution bug affecting F5 BIG-IP multi-purpose networking devices/modules.

We have reproduced the fresh CVE-2022-1388 in F5's BIG-IP. Successful exploitation could lead to RCE from an unauthenticated user.

The new F5 RCE vulnerability, CVE-2022-1388, is trivial to exploit.

One thing of note - exploit attempts I've seen so far, not on mgmt interface.

CVE-2022-1388 is a flaw that can be exploited by unauthenticated attackers remotely to take over vulnerable BIG-IP devices and use that access to execute system commands, create or delete files, or disable services.

"First, make sure you are not exposing the admin interface. If you can't manage that: Don't try patching. Turn off the device instead. If the configuration interface is safe: Patch," he advised.

News URL

https://www.helpnetsecurity.com/2022/05/09/cve-2022-1388-poc-exploitation/