Authentication Bypass in F5 BIG-IP (CVE-2022-1388)

As part of its Quarterly Security Notification for May 2022, F5 patched CVE-2022-1388, a critical authentication bypass vulnerability in BIG-IP that was assigned a CVSSv3 score of 9.8. 

CVE-2022-1388 could be exploited by an unauthenticated attacker with network access to the management port or self IP addresses of devices that use BIG-IP. Exploitation would allow the attacker to execute arbitrary system commands, create and delete files and disable services.

For more information about the vulnerability, please visit our blog.