CVE-2024-22093: Appliance mode iControl REST vulnerability
When running in appliance mode, an authenticated remote command injection vulnerability exists in an undisclosed iControl REST endpoint on multi-bladed systems. A successful exploit can allow the attacker to cross a security boundary. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-22093?
CVE-2024-22093 is classified as a critical vulnerability due to the potential for remote command injection.
How do I fix CVE-2024-22093?
To fix CVE-2024-22093, update affected F5 software to the latest versions as recommended by F5 Networks.
Which F5 products are affected by CVE-2024-22093?
CVE-2024-22093 affects multiple F5 BIG-IP and BIG-IQ products within specific version ranges.
Can CVE-2024-22093 be exploited remotely?
Yes, CVE-2024-22093 can be exploited remotely if an attacker has authenticated access.
What is the potential impact of exploiting CVE-2024-22093?
Exploitation of CVE-2024-22093 can allow an attacker to cross a security boundary, leading to further system compromise.