BIG-IP Configuration utility unauthenticated remote code execution vulnerability

The BIG-IP configuration tool has a flaw that lets attackers skip the login requirement and run commands on the system if they can reach the management port. This is critical because it gives complete control without needing valid credentials.

An unauthenticated attacker with network access to BIG-IP management or self IP interfaces can bypass authentication checks in the configuration utility to achieve arbitrary command execution. The vulnerability requires no credentials and grants system-level privileges; exploitation is feasible over the network without prerequisites beyond port accessibility.