CVE-2022-27662: Medium severity F5 Traffix Signaling Delivery Controller vulnerability
On F5 Traffix SDC 5.2.x versions prior to 5.2.2 and 5.1.x versions prior to 5.1.35, a stored Cross-Site Template Injection vulnerability exists in an undisclosed page of the Traffix SDC Configuration utility that allows an attacker to execute template language-specific instructions in the context of the server. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated
Affected Software
Event History
Frequently Asked Questions
What is CVE-2022-27662?
CVE-2022-27662 is a stored Cross-Site Template Injection vulnerability in F5 Traffix SDC versions prior to 5.2.2 and 5.1.35.
How severe is CVE-2022-27662?
CVE-2022-27662 has a severity level of medium with a CVSS score of 4.8.
What is the affected software for CVE-2022-27662?
The affected software for CVE-2022-27662 is F5 Traffix SDC versions prior to 5.2.2 and 5.1.35.
How can an attacker exploit CVE-2022-27662?
An attacker can exploit CVE-2022-27662 by executing template language-specific instructions in the context of the Traffix SDC Configuration utility.
How can I mitigate CVE-2022-27662?
To mitigate CVE-2022-27662, it is recommended to update F5 Traffix SDC to version 5.2.2 or 5.1.35.