BIG-IP, Big Problems.

Share This Post

F5 recently disclosed a CVSS 9.8 vulnerability with BIG-IP systems. This vulnerability would allow a NON-AUTHENTICATED attacker with access to the BIG-IP system to execute arbitrary system commands, create/delete files, and disable services. This does appear to be limited to just the control area, and doesn’t directly expose any data. However, any time you have this level of control the options to further the attack are pretty vast.

Looking through the mitigations that F5 provides, it appears that this vulnerability is available through the management interface and the “self IP address”. Again, this looks like a problem that could be solved simply with a default-deny posture, and only allowing connections that are absolutely necessary.

You can follow the vulnerability and read through the mitigation steps here: https://support.f5.com/csp/article/K23605346



Reach out to our incident response team for help

More To Explore

Information Security News – 4/14/2025

Oracle Confirms “Obsolete Servers” Hacked Article link: https://www.bleepingcomputer.com/news/security/oracle-says-obsolete-servers-hacked-denies-cloud-breach/    Phishing Kits Now Vet Victims in Real-Time Before Stealing Credentials Article link: https://www.bleepingcomputer.com/news/security/phishing-kits-now-vet-victims-in-real-time-before-stealing-credentials/    Neptune RAT

Information Security News – 4/7/2025

Criminal Group Claims Responsibility for Cyberattack on Minnesota Casino Article Link: https://cdcgaming.com/brief/cybersecurity-incident-at-minnesota-tribal-community-casino-prompts-shutdown/ As CISA Downsizes, Where Can Enterprises Get Support? Article Link: https://www.darkreading.com/cybersecurity-operations/roundtable-cisa-downsizes-where-can-enterprises-look-support Oracle Privately

Do You Want to Shore Up Your Defenses?

We're opening our first round of threat hunting engagements to 100 organizations. Sign up or join the wait list here.