Vulnerabilities > CVE-2022-33947 - Deserialization of Untrusted Data vulnerability in F5 Big-Ip Domain Name System

CVSS 6.5 - MEDIUM

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

LOW

Confidentiality impact

NONE

Integrity impact

NONE

Availability impact

HIGH

network

low complexity

CWE-502

NVD

Published: 2022-08-04

Updated: 2024-11-21

Summary

In BIG-IP Versions 16.1.x before 16.1.3, 15.1.x before 15.1.6.1, 14.1.x before 14.1.5, and all versions of 13.1.x, a vulnerability exists in undisclosed pages of the BIG-IP DNS Traffic Management User Interface (TMUI) that allows an authenticated attacker with at least operator role privileges to cause the Tomcat process to restart and perform unauthorized DNS requests and operations through undisclosed requests. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

Vulnerable Configurations

Part	Description	Count
Application	F5 F5 BIG IP Domain Name System 13.1.0 F5 BIG IP Domain Name System 13.1.0.0 F5 BIG IP Domain Name System 13.1.0.1 F5 BIG IP Domain Name System 13.1.0.2 F5 BIG IP Domain Name System 13.1.0.3 F5 BIG IP Domain Name System 13.1.0.4 F5 BIG IP Domain Name System 13.1.0.5 F5 BIG IP Domain Name System 13.1.0.6 F5 BIG IP Domain Name System 13.1.0.7 F5 BIG IP Domain Name System 13.1.0.8 F5 BIG IP Domain Name System 13.1.1 F5 BIG IP Domain Name System 13.1.1.1 F5 BIG IP Domain Name System 13.1.1.2 F5 BIG IP Domain Name System 13.1.1.3 F5 BIG IP Domain Name System 13.1.1.4 F5 BIG IP Domain Name System 13.1.1.5 F5 BIG IP Domain Name System 13.1.2 F5 BIG IP Domain Name System 13.1.3 F5 BIG IP Domain Name System 13.1.3.1 F5 BIG IP Domain Name System 13.1.3.2 F5 BIG IP Domain Name System 13.1.3.3 F5 BIG IP Domain Name System 13.1.3.4 F5 BIG IP Domain Name System 13.1.3.5 F5 BIG IP Domain Name System 13.1.3.6 F5 BIG IP Domain Name System 13.1.4 F5 BIG IP Domain Name System 13.1.5 F5 BIG IP Domain Name System 15.1.0 F5 BIG IP Domain Name System 15.1.0.1 F5 BIG IP Domain Name System 15.1.0.2 F5 BIG IP Domain Name System 15.1.0.3 F5 BIG IP Domain Name System 15.1.0.4 F5 BIG IP Domain Name System 15.1.0.5 F5 BIG IP Domain Name System 15.1.1 F5 BIG IP Domain Name System 15.1.2 F5 BIG IP Domain Name System 15.1.2.1 F5 BIG IP Domain Name System 15.1.3 F5 BIG IP Domain Name System 15.1.4 F5 BIG IP Domain Name System 15.1.4.1 F5 BIG IP Domain Name System 15.1.5 F5 BIG IP Domain Name System 15.1.5.1 F5 BIG IP Domain Name System 15.1.6 F5 BIG IP Domain Name System 14.1.0 F5 BIG IP Domain Name System 14.1.0.1 F5 BIG IP Domain Name System 14.1.0.2 F5 BIG IP Domain Name System 14.1.0.2.0.45.4 F5 BIG IP Domain Name System 14.1.0.2.0.62.4 F5 BIG IP Domain Name System 14.1.0.3 F5 BIG IP Domain Name System 14.1.0.3.0.79.6 F5 BIG IP Domain Name System 14.1.0.3.0.97.6 F5 BIG IP Domain Name System 14.1.0.3.0.99.6 F5 BIG IP Domain Name System 14.1.0.5 F5 BIG IP Domain Name System 14.1.0.5.0.15.5 F5 BIG IP Domain Name System 14.1.0.5.0.36.5 F5 BIG IP Domain Name System 14.1.0.5.0.40.5 F5 BIG IP Domain Name System 14.1.0.6 F5 BIG IP Domain Name System 14.1.0.6.0.11.9 F5 BIG IP Domain Name System 14.1.0.6.0.14.9 F5 BIG IP Domain Name System 14.1.0.6.0.68.9 F5 BIG IP Domain Name System 14.1.0.6.0.70.9 F5 BIG IP Domain Name System 14.1.2 F5 BIG IP Domain Name System 14.1.2-0.0.37 F5 BIG IP Domain Name System 14.1.2-0.89.37 F5 BIG IP Domain Name System 14.1.2.0.11.37 F5 BIG IP Domain Name System 14.1.2.0.18.37 F5 BIG IP Domain Name System 14.1.2.0.32.37 F5 BIG IP Domain Name System 14.1.2.1 F5 BIG IP Domain Name System 14.1.2.1-0.0.4 F5 BIG IP Domain Name System 14.1.2.1.0.14.4 F5 BIG IP Domain Name System 14.1.2.1.0.16.4 F5 BIG IP Domain Name System 14.1.2.1.0.34.4 F5 BIG IP Domain Name System 14.1.2.1.0.46.4 F5 BIG IP Domain Name System 14.1.2.1.0.83.4 F5 BIG IP Domain Name System 14.1.2.1.0.97.4 F5 BIG IP Domain Name System 14.1.2.1.0.99.4 F5 BIG IP Domain Name System 14.1.2.1.0.105.4 F5 BIG IP Domain Name System 14.1.2.1.0.111.4 F5 BIG IP Domain Name System 14.1.2.1.0.115.4 F5 BIG IP Domain Name System 14.1.2.1.0.122.4 F5 BIG IP Domain Name System 14.1.2.2 F5 BIG IP Domain Name System 14.1.2.2-0.0.4 F5 BIG IP Domain Name System 14.1.2.3 F5 BIG IP Domain Name System 14.1.2.3-0.0.5 F5 BIG IP Domain Name System 14.1.2.4 F5 BIG IP Domain Name System 14.1.2.5 F5 BIG IP Domain Name System 14.1.2.5-0.0.3 F5 BIG IP Domain Name System 14.1.2.6 F5 BIG IP Domain Name System 14.1.2.6-0.0.2 F5 BIG IP Domain Name System 14.1.2.7 F5 BIG IP Domain Name System 14.1.2.7-0.0.5 F5 BIG IP Domain Name System 14.1.2.8 F5 BIG IP Domain Name System 14.1.3 F5 BIG IP Domain Name System 14.1.3.1 F5 BIG IP Domain Name System 14.1.4 F5 BIG IP Domain Name System 14.1.4.6 F5 BIG IP Domain Name System 14.1.5 F5 BIG IP Domain Name System 16.1.0 F5 BIG IP Domain Name System 16.1.1 F5 BIG IP Domain Name System 16.1.2 F5 BIG IP Domain Name System 16.1.2.2 F5 BIG IP Domain Name System 16.1.3	100

Common Weakness Enumeration (CWE)

CWE-502 - Deserialization of Untrusted Data

Summary

Vulnerable Configurations

Common Weakness Enumeration (CWE)

References