.jpg)
.jpg)
.gif)
F5 has warned of a high-severity flaw impacting BIG-IP appliances that could lead to denial-of-service (DoS) or arbitrary code execution.
The issue is rooted in the iControl Simple Object Access Protocol (SOAP) interface and affects the following versions of BIG-IP –
- 13.1.5
- 14.1.4.6 – 14.1.5
- 15.1.5.1 – 15.1.8
- 16.1.2.2 – 16.1.3, and
- 17.0.0
“A format string vulnerability exists in iControl SOAP that allows an authenticated attacker to crash the iControl SOAP CGI process or, potentially execute arbitrary code,” the company said in an advisory. “In appliance mode BIG-IP, a successful exploit of this vulnerability can allow the attacker to cross a security boundary.”
Tracked as CVE-2023-22374 (CVSS score: 7.5/8.5), security researcher Ron Bowes of Rapid7 has been credited with discovering and reporting the flaw on December 6, 2022.
Given that the iCOntrol SOAP interface runs as root, a successful exploit could permit a threat actor to remotely trigger code execution on the device as the root user. This can be achieved by inserting arbitrary format string characters into a query parameter that’s passed to a logging function called syslog, Bowes said.
F5 noted that it has addressed the problem in an engineering hotfix that is available for supported versions of BIG-IP. As a workaround, the company is recommending users restrict access to the iControl SOAP API to only trusted users.
Cisco Patches Command Injection Bug in Cisco IOx
The disclosure comes as Cisco released updates to fix a flaw in Cisco IOx application hosting environment (CVE-2023-20076, CVSS score: 7.2) that could open the door for an authenticated, remote attacker to execute arbitrary commands as root on the underlying host operating system.
The vulnerability impacts devices running Cisco IOS XE Software and have the Cisco IOx feature enabled, as well as 800 Series Industrial ISRs, Catalyst Access Points, CGR1000 Compute Modules, IC3000 Industrial Compute Gateways, IR510 WPAN Industrial Routers.
Cybersecurity firm Trellix, which identified the issue, said it could be weaponized to inject malicious packages in a manner that can persist system reboots and firmware upgrades, leaving which can only be removed after a factory reset.
“A bad actor could use CVE-2023-20076 to maliciously tamper with one of the affected Cisco devices anywhere along this supply chain,” it said, warning of potential threats to the broader supply chain. “The level of access that CVE-2023-20076 provides could allow for backdoors to be installed and hidden, making the tampering entirely transparent for the end user.”
While the exploit requires the attacker to be authenticated and have admin privileges, it’s worth noting that adversaries can find a variety of ways to escalate privileges, such as phishing or by banking on the possibility that users may have failed to change the default credentials.
Also discovered by Trellix is a security check bypass during TAR archive extraction, which could allow an attacker to write on the underlying host operating system as the root user.
The networking equipment major, which has since remediated the defect, said the vulnerability poses no immediate risk as “the code was put there for future application packaging support.”
Unique Visitors
[url=https://lexapro.wiki/]lexapro 10 mg generic cost[/url] [url=https://ventolin.quest/]albuterol medication pills[/url] [url=https://stromectola.online/]buy ivermectin uk[/url] [url=https://cephalexin.charity/]cephalexin 600 mg tablets[/url]
[url=https://celebrextab.shop/]celebrex price south africa[/url]
[url=https://buyzovirax.monster/]acyclovir price usa[/url]
[url=http://abilifytab.shop/]abilify in india[/url]
[url=http://lasix.solutions/]furosemide 40mg tab[/url]
[url=https://albuterolr.online/]albuterol nebulizer[/url]
[url=http://citalopram.company/]buy citalopram 20mg online[/url] [url=http://tizanidinezanaflex.online/]discount zanaflex[/url] [url=http://cephalexintabs.monster/]drug keflex[/url]
[url=http://allopurinol.ink/]allopurinol 150[/url]
[url=https://toradol.live/]toradol allergy[/url]
[url=http://stromectola.online/]stromectol buy[/url]
[url=https://viagraonlinedrugstore.foundation/]viagra usa online[/url]
[url=http://abilifytab.shop/]abilify 5mg price in usa[/url]
[url=http://erectafil.cyou/]erectafil 10[/url]
[url=https://dapoxetinepriligy.online/]dapoxetine 90mg[/url]
[url=http://clonidine.works/]clonidine online pharmacy[/url]
[url=https://vermox.sbs/]vermox 500[/url]
[url=https://lasix.charity/]furosemide medicine[/url]
[url=https://cytotectabs.quest/]where to get misoprostol[/url] [url=https://buspar.company/]buspar 90 mg daily[/url] [url=https://finasteride.pics/]generic propecia 2019[/url] [url=https://tizanidinezanaflex.shop/]tizanidine 4 mg[/url] [url=https://cephalexin.life/]cephalexin pill[/url] [url=https://malegra.sbs/]malegra 200[/url]
[url=https://furosemide.trade/]furosemide in mexico[/url]
[url=http://cytotectabs.quest/]can you buy misoprostol over the counter[/url] [url=http://singulair.foundation/]singulair coupon online[/url] [url=http://cephalexin.directory/]generic for keflex[/url] [url=http://lyrica365.online/]lyrica drug cost[/url] [url=http://ampicillin.ink/]ampicillin brand[/url] [url=http://buspar.company/]buspar coupon[/url] [url=http://stromectola.online/]stromectol cost[/url] [url=http://zovirax.lol/]acyclovir best price[/url]
[url=https://priligy.best/]dapoxetine in mexico[/url] [url=https://cialisip.com/]best india tadalafil online[/url] [url=https://lasix.foundation/]lasix canada pharmacy[/url]
[url=http://prednisolone.trade/]buying prednisolone 5mg online without prescription[/url]
[url=https://anafraniltab.shop/]anafranil 10[/url] [url=https://erectafil.cyou/]erectafil online[/url] [url=https://finasteridehr.online/]can i buy propecia online[/url] [url=https://malegra.sbs/]buy malegra 25 mg[/url] [url=https://lasix.solutions/]furosemide cost us[/url] [url=https://singulair.foundation/]singulair tablet 4mg[/url] [url=https://finasteride.pics/]propecia otc[/url] [url=https://zovirax.lol/]buy zovirax cream 10g[/url]
[url=http://stromectol.directory/]ivermectin 0.08 oral solution[/url]
[url=https://lasix.charity/]lasix without a prescription[/url]
[url=https://cephalexin.charity/]buy cephalexin 500 mg online[/url]
[url=http://antabuse.ink/]antabuse canada[/url] [url=http://abilifytab.shop/]abilify cost 1mg[/url] [url=http://furosemide.trade/]lasix 40 mg cost[/url] [url=http://tizanidinezanaflex.online/]zanaflex 2mg capsules[/url] [url=http://finasteride.pics/]propecia over the counter[/url] [url=http://prednisolone.trade/]prednisolone price australia[/url] [url=http://cymbaltatab.online/]cymbalta generic 30 mg[/url] [url=http://erectafil.cyou/]erectafil 20[/url]
[url=https://malegratabs.com/]malegra dxt tablets[/url]
[url=http://lasix.solutions/]furosemide brand name[/url]
[url=https://lyricatabs.online/]buy lyrica 300 mg online[/url]
[url=http://seroquel.pics/]seroquel 100 mg[/url]
[url=http://fluoxetine.ink/]generic prozac tablet[/url]
[url=http://toradoltab.monster/]toradol[/url]
[url=https://zithromax.pics/]azithromycin canada[/url]
[url=http://xenicaltabs.shop/]orlistat pill[/url] [url=http://dapoxetinepriligy.online/]cheap avana pill[/url]
[url=http://cytotectabs.quest/]buy cytotec online with paypal[/url]
[url=https://lexapro.wiki/]lexapro ocd[/url]
[url=https://singulair.foundation/]singulair tabs 10mg[/url]
[url=https://stromectol.directory/]ivermectin medicine[/url]
[url=https://stromectola.online/]ivermectin cost uk[/url]
[url=http://toradoltabs.online/]toradol 60 mg[/url]
[url=https://furosemide.trade/]lasix tablet 20 mg[/url]
[url=https://toradoltabs.online/]how much is toradol[/url]
[url=https://lexapro.wiki/]lexapro online pharmacy[/url]
[url=https://atarax.company/]atarax uk[/url]
[url=http://buyzovirax.monster/]acyclovir prices[/url]
[url=https://lexapro.foundation/]generic lexapro[/url]
[url=http://fluoxetine.ink/]purchase prozac online[/url] [url=http://onlinepharmacy.us.org/]internet pharmacy mexico[/url] [url=http://atarax.company/]atarax 25 mg prescription[/url] [url=http://albendazole.fun/]albendazole brand name[/url] [url=http://allopurinol.ink/]allopurinol 200 mg daily[/url] [url=http://buspartabs.com/]buying buspar[/url] [url=http://jjpharmacynj.com/]what’s the best online pharmacy[/url]
[url=http://allopurinol.ink/]where to buy allopurinol[/url]
[url=http://cephalexin.life/]buy cephalexin mexico[/url]
[url=https://dapoxetine.cyou/]buy dapoxetine uk[/url]
[url=https://stromectola.online/]stromectol medication[/url]
[url=http://tretinoin.charity/]tretinoin online uk[/url]
[url=http://zoloft.gives/]zoloft daily[/url] [url=http://ataraxd.online/]atarax uk buy[/url]
[url=http://zoloft2023.com/]purchase zoloft[/url] [url=http://orlistattabs.shop/]orlistat no prescription[/url] [url=http://diflucantbs.online/]diflucan 150 mg canada[/url] [url=http://albuterolr.online/]albuterol cost in uk[/url]
[url=http://amoxicillin.men/]amoxicillin pills over the counter[/url]
[url=http://levitra2023.com/]levitra generic cheap[/url]
[url=https://furosemide.trade/]buying furosemide online[/url]
[url=https://sildalis.gives/]sildalis 120[/url]
[url=https://onlinepharmacy.us.org/]online pharmacy[/url]
[url=https://stromectola.online/]ivermectin medicine[/url]
[url=https://amoxicillin.men/]amoxil 500 mg capsules[/url]
[url=https://bupropion.directory/]bupropion cheap[/url]
[url=https://tizanidinezanaflex.shop/]tizanidine 4mg tablet price[/url] [url=https://furosemide.trade/]lasix without prescriptions[/url] [url=https://amoxicillin.men/]amoxicillin 125mg[/url] [url=https://anafraniltab.shop/]anafranil tablet[/url] [url=https://cephalexin.life/]keflex 2000 mg[/url]
[url=https://antabuse.ink/]antabuse to buy[/url] [url=https://cymbaltatab.online/]cymbalta capsule[/url] [url=https://buspar.company/]buspar 60 mg[/url] [url=https://cephalexin.life/]cephalexin 500mg buy[/url] [url=https://tizanidinezanaflex.shop/]tizanidine 2 mg cost[/url] [url=https://abilifytab.shop/]abilify 5mg coupon[/url] [url=https://levitra2023.com/]levitra 10 mg tablets[/url]
[url=http://bupropion.directory/]zyban cheap[/url]
[url=https://femaleviagra.foundation/]purchase viagra in australia[/url]
[url=http://atarax.company/]atarax coupon[/url]
[url=http://tizanidinezanaflex.online/]tizanidine 6 mg tablets[/url] [url=http://cymbaltatab.online/]cymbalta 30 mg price[/url] [url=http://levitra2023.com/]levitra medication[/url] [url=http://buspar.company/]buy buspar online[/url] [url=http://propeciatab.com/]propecia for sale canada[/url] [url=http://wellbutrin.company/]bupropion online india[/url]
[url=https://vermox.sbs/]vermox buy[/url]
[url=https://dapoxetinepriligy.online/]priligy tablets us[/url] [url=https://drugstores.store/]online pharmacy delivery[/url] [url=https://fluoxetine.ink/]can you buy prozac over the counter uk[/url] [url=https://zoloft2023.com/]zoloft 50 mg daily[/url] [url=https://zithromax.pics/]azithromycin 500 mg tablet cost[/url] [url=https://priligy.best/]cheap dapoxetine[/url]
[url=http://toradol.life/]toradol canada[/url] [url=http://anafraniltab.shop/]anafranil 75 mg[/url] [url=http://cephalexin.charity/]cephalexin 600 mg[/url] [url=http://antabuse.ink/]antabuse pills for sale[/url] [url=http://malegra.sbs/]malegra 100 from india[/url] [url=http://zithromaxtabs.com/]azithromycin zithromax[/url] [url=http://stromectol.directory/]ivermectin 3mg[/url] [url=http://seroquel.pics/]seroquel pills for sale[/url]
[url=https://singulair.foundation/]singulair medicine generic[/url]
[url=https://antabuse.ink/]antabus[/url]
[url=https://finasteridehr.online/]propecia price in usa[/url]
[url=http://femaleviagra.foundation/]best female viagra tablets[/url]
[url=http://antabuse.ink/]antabuse pill over the counter[/url] [url=http://amoxicillin.men/]augmentin 875 mg coupon[/url] [url=http://lexapro.wiki/]lexapro prescription coupon[/url] [url=http://abilifytab.shop/]over the counter abilify[/url] [url=http://diflucan.ink/]fluconazole 150mg order[/url] [url=http://finasteride.pics/]purchase propecia canada[/url] [url=http://prednisolone.trade/]25mg prednisolone[/url]
[url=https://lisinoprilrem.online/]2 lisinopril[/url]
[url=https://cialisip.com/]order tadalafil india[/url]
[url=https://zanaflex.click/]tizanidine 10mg price[/url] [url=https://viagradrugstore.online/]how much is viagra in australia[/url] [url=https://gabapentin.trade/]rx gabapentin capsules[/url] [url=https://elaviltab.online/]amitriptyline hcl 25 mg tab[/url] [url=https://advair.best/]advair diskus in europe[/url] [url=https://erythromycintabs.quest/]erythromycin no prescription[/url]
[url=https://xenical.site/]generic xenical australia[/url]
[url=https://escitalopram.best/]lexapro 20 mg tablet[/url]
[url=https://amitriptyline.digital/]generic elavil 25 mg tablets[/url]
[url=http://citalopram.best/]10mg citalopram[/url] [url=http://accutane.wiki/]accutane cream uk[/url] [url=http://arimidextabs.quest/]buy arimidex south africa[/url] [url=http://albuterol.pics/]where can i buy ventolin over the counter[/url]
[url=http://ivermectin.foundation/]stromectol 12mg online[/url]
[url=https://prednisone.gives/]prednisone 10 mg purchase[/url]
[url=http://advair.directory/]advair cost mexico[/url] [url=http://toradol.best/]toradol 60 mg[/url] [url=http://zanaflex.click/]tizanidine 6 mg coupon[/url] [url=http://retinoa.cyou/]retino 0.25[/url] [url=http://accutanepill.com/]accutane 10mg for sale[/url] [url=http://bupropion.best/]generic wellbutrin for sale[/url] [url=http://ivermectin.gives/]ivermectin humans[/url]
[url=https://abilify.best/]abilify discount coupon[/url] [url=https://flomaxtabs.quest/]flomax[/url] [url=https://westhavenpharmacyrx.com/]cheap scripts pharmacy[/url] [url=https://accutane.gives/]accutane generic cost[/url] [url=https://paxiltab.monster/]buy paxil[/url] [url=https://dexamethasonex.com/]dexamethasone 2mg tablets price[/url] [url=https://propranolola.online/]where to buy propranolol[/url] [url=https://dapoxetinetabs.monster/]priligy 30mg price[/url]
[url=https://cafergot.boutique/]cafergot 1mg[/url]
[url=http://lioresalbaclofen.online/]baclofen 50 mg[/url] [url=http://retinoa.cyou/]retino 0.025[/url] [url=http://glucophagetabs.com/]glucophage 500mg cheap[/url] [url=http://prazosin.cyou/]prazosin hcl 5mg[/url] [url=http://dapoxetinetabs.monster/]priligy united states[/url]
[url=https://toradoltabs.shop/]toradol 10mg pills[/url] [url=https://toradol.best/]toradol 70 mg tablet[/url] [url=https://dexamethasonex.com/]dexamethasone 1.5 mg tablet[/url]
[url=http://propranolola.online/]propranolol generic[/url]
[url=https://erythromycintabs.quest/]erythromycin ethylsuccinate[/url]
[url=http://prazosin.cyou/]prazosin 4 mg[/url]
[url=https://glucophagetabs.com/]metformin canada online[/url]
[url=http://accutane.wiki/]best accutane[/url]
[url=http://amoxil.lol/]amoxil capsule 250mg[/url] [url=http://prazosin.lol/]prazosin medicine[/url]
[url=https://accutane.gives/]how to get accutane[/url]
[url=http://glucophagetabs.com/]buy metformin online without a prescription[/url]
[url=http://amoxil.lol/]buy augmentin 875 mg online[/url]
[url=https://clomido.com/]clomid rx[/url]
[url=https://clopidogrel.cyou/]clopidogrel 75 mg tabs[/url]
[url=http://nexiumtab.com/]nexium 40 price in india[/url]