References https://my.f5.com/manage/s/article/K23605346 https://www.picussecurity.com/resource/cve-2022-1388-f5-big-ip-vulnerability-exploit https://avd.aliyun.com/detail?id=AVD-2022-1388 https://www.rapid7.com/db/modules/exploit/linux/http/f5_icontrol_rce/ https://blog.nsfocus.net/f5-big-ip-icontrol-soapcve-2023-22374/ https://arcticwolf.com/resources/blog/f5-big-ip-rce-vulnerability-actively-exploited-in-the-wild/ https://unit42.paloaltonetworks.com/cve-2022-1388/ https://my.f5.com/manage/s/article/K000137522 https://www.coresecurity.com/core-labs/exploits/f5-big-ip-icontrol-rest-api-remote-code-execution-exploit https://my.f5.com/manage/s/article/K000148587
Related Vulnerabilitiesshiziyu-cms-apicontroller-sqli: shiziyu cms apicontroller sqliPoCCVE-2021-22986: F5 iControl REST - Remote Command ExecutionPoCCVE-2022-1388: F5 BIG-IP iControl - REST Auth Bypass RCEPoCCVE-2021-22986: F5 BIG-IP iControl REST unauthenticated RCEPoCCVE-2022-1388: F5 BIG-IP iControl REST Auth Bypass RCEPoCshiziyu-cms-apicontroller-sqli: Shiziyu CMS Api Controller - SQL InjectionF5 iControl REST CVE-2021-22986 代码执行漏洞F5 BIG-IP 和 BIG-IQ iControlPortal.cgi 跨站请求伪造漏洞F5 BIG-IP iControlPortal 格式字符串漏洞F5 BIG-IP iControl REST身份验证绕过漏洞(CVE-2022-1388)狮子鱼CMS ApiController.class.php SQL注入漏洞F5 BIG-IP/BIG-IQ iControl REST 未授权远程代码执行漏洞