Exploit for #VU51391 OS Command Injection in F5 Networks Server applications

Published: 2021-04-16 | Updated: 2022-05-29

Vulnerability identifier: #VU51391

Vulnerability risk: High

CVSSv3.1: 9.4 [CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:H/RL:O/RC:C]

CVE-ID: CVE-2021-22986

CWE-ID: CWE-78

Exploitation vector: Network

Exploits in database: 11

May 29, 2022
- F5-BIG-IP-POC (CVE-2020-5902 CVE-2021-22986 CVE-2022-1388 POC集合) [Github]
July 19, 2021
- F5_RCE (CVE-2021-22986 F5 BIG-IP iControl 命令执行漏洞) [Github]
July 1, 2021
- CVE-2021-22986-Poc (This is a Poc for BIGIP iControl unauth RCE ) [Github]
June 10, 2021
- CVE-2021-22986 (Code By:Tas9er / F5 BIG-IP 远程命令执行漏洞) [Github]
May 26, 2021
- f5_rce_poc (cve-2021-22986 f5 rce 漏洞批量检测 poc) [Github]
May 24, 2021
- CVE-2021-22986-SSRF2RCE (F5 BIG-IP/BIG-IQ iControl Rest API SSRF to RCE) [Github]
- CVE-2021-22986 (CVE-2021-22986 & F5 BIG-IP RCE) [Github]
May 18, 2021
- CVE-202122986-EXP (F5 BIG-IP远程代码执行；cve-2021-22986，批量检测；命令执行利用) [Github]
May 9, 2021
- F5 BIG-IP 16.0.x - iControl REST Remote Code Execution (Unauthenticated) [Exploit-DB]
- F5 iControl REST Unauthenticated SSRF Token Generation RCE [Metasploit]
April 16, 2021
- CVE-2021-22986_F5_BIG_IP_GUI_Exploit () [Github]

Impact: Code execution

Vendor: F5 Networks