Threat Brief: CVE-2022-1388
Summary: On May 4, 2022, F5 released a security advisory for a remote code execution vulnerability in the iControlREST component of BIG-IP tracked as CVE-2022-1388, which lets threat actors bypass authentication and run arbitrary code on unpatched systems and carries a 9.8 CVSS score. Palo Alto Networks released Threat Prevention signature 92570 on May 9, and it triggered 2,552 times between 4:47 and 14:00 UTC on May 10, with analysis of 2,151 triggering packets showing both vulnerability scanning and active exploitation attempts.
Bottom line: A 9.8-rated authentication bypass drew 2,552 signature hits in under ten hours, meaning scanning and exploitation began almost immediately after the advisory - the window between patch release and attack is effectively zero.
Read the original at Unit 42 Palo Alto Networks ↗
- Topics
- Vulnerabilities & Patching
- Mentions
- CVE-2022-1388
- Related
- CVE-2022-1388: F5 BIG-IP Missing Authentication Vulnerability Known Exploited Vulnerabilities · May 10, 2022Threat Advisory: Critical F5 BIG-IP Vulnerability Cyber Risks ·Observed in the Wild: F5 BIG-IP CVE-2022-1388 Cyber Risks ·