New critical vulnerabilities found in F5 devices – Security – Networking – iTnews

Enterprise security and network appliance vendor F5 has issued an advisory covering four critical vulnerabilities that attackers can exploit to remotely take over unpatched systems.
Unauthenticated attackers can exploit the Common Vulnerabilities and Exposures (CVE) 2021-22986 flaw in the F5 iControl representational state transfer (REST) application programming interface to remotely run arbitrary system commands on several F5 products.
Given a Common Vulnerabilities Scoring System version 3 rating…

Click here to view the original article.