Skip to content

Cyber Security And Bitcoin Blockchain News

The World

  • ALGO Boosted by FIFA Partnership News, as AVAX and Near Rise Higher – Market Updates Bitcoin News bitcoin news
  • CZ Says Binance Supports Proposal to Compensate LUNA Retail Users First – Featured Bitcoin News bitcoin news
  • Erratic Bond Yields, Lockdowns, and War — 3 Reasons Why Economic Recovery Won’t Happen Quickly – Economics Bitcoin News bitcoin news
  • Top Video Game Artists Adopt NFTs to Help Ukraine, Collection to Release on Official MetaHistory Museum – Metaverse Bitcoin News bitcoin news
  • Collectors and Enthusiasts Can Now Turn Their Image and Likeness into Eye-popping NFTs with Onliners Metaverse bitcoin news
  • Luna Foundation Guard Discloses Usage of Bitcoin Reserves – Bitcoin News bitcoin news
  • Grayscale Met With The SEC, Tried To Convince Them To Turn The GBTC Into An ETF bitcoin news
  • Russian Crypto Mining Giant Bitriver Considers Challenging US Sanctions – Mining Bitcoin News bitcoin news

Researchers Develop RCE Exploit for the Latest F5 BIG-IP Vulnerability

Posted on May 9, 2022 By root


BIG-IP Exploit

Days after F5 released patches for a critical remote code execution vulnerability affecting its BIG-IP family of products, security researchers are warning that they were able to create an exploit for the shortcoming.

Tracked CVE-2022-1388 (CVSS score: 9.8), the flaw relates to an iControl REST authentication bypass that, if successfully exploited, could lead to remote code execution, allowing an attacker to gain initial access and take control of an affected system.

This could range anywhere from deploying cryptocurrency miners to deploying web shells for follow-on attacks, such as information theft and ransomware.

“We have reproduced the fresh CVE-2022-1388 in F5’s BIG-IP,” cybersecurity company Positive Technologies said in a tweet on Friday. “Patch ASAP!”

The critical security vulnerability impacts the following versions of BIG-IP products –

  • 16.1.0 – 16.1.2
  • 15.1.0 – 15.1.5
  • 14.1.0 – 14.1.4
  • 13.1.0 – 13.1.4
  • 12.1.0 – 12.1.6
  • 11.6.1 – 11.6.5

Fixes are available in versions 17.0.0, 16.1.2.2, 15.1.5.1, 14.1.4.6, and 13.1.5. Firmware versions 11.x and 12.x will not receive security updates and users relying on those versions should consider upgrading to a newer version or apply the workarounds –

  • Block iControl REST access through the self IP address
  • Block iControl REST access through the management interface, and
  • Modify the BIG-IP httpd configuration

Last month, cybersecurity authorities from Australia, Canada, New Zealand, the U.K., and the U.S. jointly warned that “threat actors aggressively targeted newly disclosed critical software vulnerabilities against broad target sets, including public and private sector organizations worldwide.”

With the F5 BIG-IP flaw found trivial to exploit, malicious hacking crews are expected to follow suit, making it imperative that affected organizations apply the patches.





TheHackersNews/

cyber security news

Post navigation

Previous Post: Bitcoin Downtrend Intact, Why The Bears Might Aim $32K
Next Post: U.S. Offering $10 Million Reward for Information on Conti Ransomware Hackers

Related Posts

  • Microsoft Azure Vulnerability Exposes PostgreSQL Databases to Other Customers cyber security news
  • [Template] Incident Response for Management Presentation cyber security news
  • Heroku Forces User Password Resets Following GitHub OAuth Token Theft cyber security news
  • New Bluetooth Hack Could Let Attackers Remotely Unlock Smart Locks and Cars cyber security news
  • U.S Cybersecurity Agency Lists 2021’s Top 15 Most Exploited Software Vulnerabilities cyber security news
  • Zyxel Releases Patch for Critical Firewall OS Command Injection Vulnerability cyber security news

Archives

  • May 2022

Categories

  • bitcoin news
  • cyber security news

Recent Posts

  • Sequel to Iconic RPG Ni No Kuni to Feature NFT Integration and Play-to-Earn Mechanics – News Bitcoin News
  • India’s Central Bank RBI to Adopt a ‘Graded Approach’ to Digital Currency Launch – Regulation Bitcoin News
  • Ethereum Slips, What Are The Next Vital Trading Levels For The Coin?
  • We’re Approaching a Recession but It’s ‘Actually a Good Thing’ – Economics Bitcoin News
  • FTX CEO Says Crypto Exchange Is Ready to Spend Billions on Acquisition Deals – Bitcoin News

Recent Comments

No comments to show.
  • Gold Ulrick Hackers Still in Action Despite Massive Conti Ransomware Leak cyber security news
  • How Can the Rise in Fuel Price Be Turned Into a Good Investment? bitcoin news
  • What You Need to Know to Stay Resilient cyber security news
  • Europe Agrees to Adopt New NIS2 Directive Aimed at Hardening Cybersecurity cyber security news
  • Tether Launches on Polygon, USDT Stablecoin Now Hosted on 11 Blockchain Networks – Altcoins Bitcoin News bitcoin news
  • New REvil Samples Indicate Ransomware Gang is Back After Months of Inactivity cyber security news
  • Bitcoin, Ethereum Down 50% From All-Time Highs — Billions Leave Crypto Economy – Market Updates Bitcoin News bitcoin news
  • U.S. Offers $10 Million Bounty for Information on 6 Russian Military Hackers cyber security news

Copyright © 2022 Cyber Security And Bitcoin Blockchain News.

Powered by PressBook News Dark theme