CVE-2021-23024

Published: Jun 10, 2021Modified: Jun 17, 2026

7.2

Vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Exploitability: 1.2 / Impact: 5.9

Source: NVD

Description

On version 8.0.x before 8.0.0.1, and all 6.x and 7.x versions, the BIG-IQ Configuration utility has an authenticated remote command execution vulnerability in undisclosed pages. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

Affected (3)

Products: F5: Big Iq Centralized Management

1 product

Big Iq Centralized Management

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
F5 Big Iq Centralized Management	From 6.0.0 to 6.1.0
F5 Big Iq Centralized Management	From 7.0.0 to 7.1.0
F5 Big Iq Centralized Management	From 8.0.0 to 8.0.0.1

References (4)

http://packetstormsecurity.com/files/163264/F5-BIG-IQ-VE-8.0.0-2923215-Remote-Root.html

Source: f5sirt@f5.com

ExploitThird Party AdvisoryVDB Entry

https://support.f5.com/csp/article/K06024431

Source: f5sirt@f5.com

Vendor Advisory

http://packetstormsecurity.com/files/163264/F5-BIG-IQ-VE-8.0.0-2923215-Remote-Root.html

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitThird Party AdvisoryVDB Entry

https://support.f5.com/csp/article/K06024431

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.