CVE-2023-22358: BIG-IP Edge Client for Windows vulnerability
Published Feb 1, 2023
·Updated
A DLL hijacking vulnerability exists in the BIG-IP Edge Client Windows Installer.
Affected Software
13 affected componentsFixes available
F5 BIG-IP Access Policy Manager>=7.2.2<7.2.3.1
F5 BIG-IP Access Policy Manager>=13.1.0<=13.1.5
F5 BIG-IP Access Policy Manager>=14.1.0<=14.1.5
F5 BIG-IP Access Policy Manager>=15.1.0<=15.1.8
F5 BIG-IP Access Policy Manager>=16.1.0<=16.1.3
F5 BIG-IP Access Policy Manager>=17.0.0<17.0.0.2
F5 Big-ip Edge Windows
F5 BIG-IP (APM)=17.0.0
17.1.0
F5 BIG-IP (APM)>=16.1.0<=16.1.3, =3
16.1.3.4
F5 BIG-IP (APM)>=15.1.0<=15.1.8, =3
15.1.8.2
F5 BIG-IP (APM)>=14.1.0<=14.1.5, =3
F5 BIG-IP (APM)>=13.1.0<=13.1.5, =3
F5 BIG-IP APM Clients>=7.2.2<=7.2.3
7.2.4
Event History
Feb 1, 2023
Advisory Published
via F5·01:02 PM
CVE Published
via MITRE·05:54 PM
Data Sourced
via MITRE·05:54 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is CVE-2023-22358?
CVE-2023-22358 is a DLL hijacking vulnerability in the BIG-IP Edge Client Windows Installer.
2
Which versions are affected by CVE-2023-22358?
Versions beginning with 7.2.2 to before 7.2.3.1 of the BIG-IP Edge Client Windows Installer are affected.
3
What is the severity rating of CVE-2023-22358?
CVE-2023-22358 has a severity rating of 7.8 (high).
4
How can I fix CVE-2023-22358?
To fix CVE-2023-22358, update the BIG-IP Edge Client Windows Installer to version 7.2.3.1 or later.
5
Where can I find more information about CVE-2023-22358?
You can find more information about CVE-2023-22358 at the following link: [CVE-2023-22358](https://my.f5.com/manage/s/article/K76964818)