← Back

CVE-2021-22980

nvd nist
Published: Feb 12, 2021Modified: Nov 21, 2024

JSON object

Loading...
7.8
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Exploitability: 1.8 / Impact: 5.9
Source: NVD

Description

In Edge Client version 7.2.x before 7.2.1.1, 7.1.9.x before 7.1.9.8, and 7.1.x-7.1.8.x before 7.1.8.5, an untrusted search path vulnerability in the BIG-IP APM Client Troubleshooting Utility (CTU) for Windows could allow an attacker to load a malicious DLL library from its current directory. User interaction is required to exploit this vulnerability in that the victim must run this utility on the Windows system. Note: Software versions which have reached End of Software Development (EoSD) are not evaluated.

Affected (9)

2 products
Access Policy Manager Clients
Big Ip Access Policy Manager
Configuration A
9 vulnerable
Vulnerable SoftwareAffected Versions
F5
From 7.1.5 to 7.1.8.5
From 7.1.9 to 7.1.9.8
From 7.2.1 to 7.2.1.1
F5
From 11.6.1 to 11.6.5
From 12.1.0 to 12.1.5
From 13.1.0 to 13.1.3.6
From 14.1.0 to 14.1.3
From 15.1.0 to 15.1.2
From 16.0.0 to 16.0.1.1

References (2)

Source: f5sirt@f5.com
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.