1. Forum
  2. FidoNet
  3. SECURITY

  • F5 BIG-IP iControl Remote Command Execution

    From Security Bot@2:250/1 to All on Wed Jan 25 20:22:00 2023


    F5 BIG-IP iControl Remote Command Execution

    This Metasploit module exploits a newline injection into an RPM .rpmspec
    file that permits authenticated users to remotely execute commands.
    Successful exploitation results in remote code execution as the root user.

    https://packetstormsecurity.com/files/170008/f5_icontrol_rpmspec_rce_cve_2022_4 1800.rb.txt

    Thu, 24 Nov 2022 14:13:02 GMT
    ________________________________
    --- The information is for inforamtional purposes only.
    * Origin: Read us with http://winpoint.org JID: rs@captflint.com