BIG-IP Configuration utility authenticated SQL injection vulnerability

An authenticated attacker with access to BIG-IP's configuration utility can inject malicious SQL commands to execute arbitrary system commands on the server. This is dangerous because it allows full control over the affected BIG-IP system.

SQL injection vulnerability in BIG-IP Configuration utility requires prior authentication and network access to management port or self IP addresses. Attacker can craft malicious SQL input to bypass query logic and execute arbitrary OS commands, resulting in complete system compromise.