Description
F5 iControl REST存在一系列组合漏洞，这些漏洞是由于缺乏输入验证造成的。
F5 iControl REST CVE-2021-22986 代码执行漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://my.f5.com/manage/s/article/K03009991
https://www.anquanke.com/post/id/236398
https://zhuanlan.zhihu.com/p/608430415
https://cloud.tencent.com/developer/article/1805880
https://www.cnblogs.com/zcg-cpdd/p/14589177.html
https://github.com/Al1ex/CVE-2021-22986
https://nvd.nist.gov/vuln/detail/cve-2021-22986
https://www.tenable.com/plugins/nessus/148022
https://www.coresecurity.com/core-labs/exploits/f5-big-ip-icontrol-rest-api-remote-code-execution-exploit
https://attackerkb.com/topics/J6pWeg5saG/k03009991-icontrol-rest-unauthenticated-remote-command-execution-vulnerability-cve-2021-22986
https://www.exploit-db.com/exploits/49738
https://www.h3c.com/cn/d_202112/1519648_30003_0.htm
https://www.tenablecloud.cn/plugins/nessus/147626
https://stack.chaitin.com/vuldb/detail/9dcdc547-417b-41c2-aac7-e0d2459d4eac
https://www.fireline.fun/article/page-14
https://www.ddpoc.com/DVB-2021-2344.html
https://www.invicti.com/web-application-vulnerabilities/f5-icontrol-rest-unauthenticated-remote-command-execution-vulnerability
https://es-la.tenable.com/blog/cve-2021-22986-f5-patches-several-critical-vulnerabilities-in-big-ip-big-iq