writeups.xyz / CVE-2022-41622 and CVE-2022-41800 (FIXED): F5 BIG-IP and iControl REST Vulnerabilities and Exposures

Submitter : c2a

Date: 16 November 2022

Bounty : undisclosed

Vulnerabilities :

• CSRF
• RCE
• RPM Spec Injection

Programs :

• F5

Authors :

• Ron Bowes (@Iagox86)

Link :
https://www.rapid7.com/blog/post/2022/11/16/cve-2022-41622-and-cve-2022-41800-fixed-f5-big-ip-and-icontrol-rest-vulnerabilities-and-exposures/