CVE-2022-1388criticalbajo ataqueransomwareCWE-306

CVE-2022-1388: fallo crítico en F5 BIG-IP

Publicada el · Actualizada el

Seguir esta CVE+ Monitorear BIG-IP

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

100Vexday Risk Score

Corrige ahora. Ella está bajo explotación confirmada por CISA y tiene exploit funcional público.

ssvc Actcvss 9.8epss 100%
de la publicación al armael mismo día
Publicada en NVD5 may
1ª PoC5 may
metasploit4 may
CISA KEV+5d
Acción exigida por CISAplazo federal: 2022-05-31

Apply updates per vendor instructions.

En resumen

Los dispositivos F5 BIG-IP con ciertas versiones de software permiten que los atacantes eludan la autenticación de la API iControl REST, obteniendo acceso no autorizado a funciones críticas de gestión del sistema sin credenciales válidas.

Detalle técnico

CWE-306 (Verificación de Autenticación Ausente): Las solicitudes no autenticadas a iControl REST en versiones vulnerables de BIG-IP eluden mecanismos de autenticación, permitiendo que atacantes remotos accedan directamente a funciones administrativas. Las versiones afectadas incluyen 16.1.x (<16.1.2.2), 15.1.x (<15.1.5.1), 14.1.x (<14.1.4.6), 13.1.x (<13.1.5) y todas las versiones 12.1.x y 11.6.x. El impacto incluye compromiso completo del dispositivo y manipulación de configuraciones.

Resumen generado y traducido por IA a partir de la descripción oficial.

El análisis completo de esta CVE está disponible en portugués →

On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13.1.x versions prior to 13.1.5, and all 12.1.x and 11.6.x versions, undisclosed requests may bypass iControl REST authentication. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Productos afectados
F5 · BIG-IP
PoCs públicas encontradas — 134
exploitdbwww.exploit-db.com/exploits/50932no verificadogithubgithub.com/horizon3ai/CVE-2022-1388★ 229githubgithub.com/doocop/CVE-2022-1388-EXP★ 92githubgithub.com/alt3kx/CVE-2022-1388_PoC★ 87githubgithub.com/0xf4n9x/CVE-2022-1388★ 84githubgithub.com/ZephrFish/F5-CVE-2022-1388-Exploit★ 59githubgithub.com/sherlocksecurity/CVE-2022-1388-Exploit-POC★ 56githubgithub.com/numanturle/CVE-2022-1388★ 53githubgithub.com/Al1ex/CVE-2022-1388★ 37githubgithub.com/MrCl0wnLab/Nuclei-Template-CVE-2022-1388-BIG-IP-iControl-REST-Exposed★ 28githubgithub.com/jheeree/CVE-2022-1388-checker★ 25githubgithub.com/PsychoSec2/CVE-2022-1388-POC★ 14githubgithub.com/justakazh/CVE-2022-1388★ 13githubgithub.com/Zeyad-Azima/CVE-2022-1388★ 12githubgithub.com/west9b/F5-BIG-IP-POC★ 10githubgithub.com/blind-intruder/CVE-2022-1388-RCE-checker-and-POC-Exploit★ 8githubgithub.com/Henry4E36/CVE-2022-1388★ 8githubgithub.com/vaelwolf/CVE-2022-1388★ 7githubgithub.com/qusaialhaddad/F5-BigIP-CVE-2022-1388★ 7githubgithub.com/Vulnmachines/F5-Big-IP-CVE-2022-1388★ 7githubgithub.com/MrCl0wnLab/Nuclei-Template-Exploit-F5-BIG-IP-iControl-REST-Auth-Bypass-RCE-Command-Parameter★ 6githubgithub.com/0x7eTeam/CVE-2022-1388-PocExp★ 6githubgithub.com/bandit92/CVE2022-1388_TestAPI★ 5githubgithub.com/AmirHoseinTangsiriNET/CVE-2022-1388-Scanner★ 5githubgithub.com/Angus-Team/F5-BIG-IP-RCE-CVE-2022-1388★ 5githubgithub.com/Stonzyy/Exploit-F5-CVE-2022-1388★ 5githubgithub.com/gotr00t0day/CVE-2022-1388★ 5githubgithub.com/nvk0x/CVE-2022-1388-exploit★ 3githubgithub.com/revanmalang/CVE-2022-1388★ 2githubgithub.com/SecTheBit/CVE-2022-1388★ 2githubgithub.com/savior-only/CVE-2022-1388★ 2githubgithub.com/devengpk/CVE-2022-1388★ 2githubgithub.com/saucer-man/CVE-2022-1388★ 2githubgithub.com/superzerosec/CVE-2022-1388★ 2githubgithub.com/aancw/CVE-2022-1388-rs★ 2githubgithub.com/EvilLizard666/CVE-2022-1388★ 2githubgithub.com/nico989/CVE-2022-1388★ 1githubgithub.com/TheElderHacker/CVE-2022-1388★ 1githubgithub.com/chesterblue/CVE-2022-1388★ 1githubgithub.com/ThinkingOffensively/CVE-2022-1388★ 1githubgithub.com/thatonesecguy/CVE-2022-1388-Exploit★ 1githubgithub.com/amitlttwo/CVE-2022-1388★ 1githubgithub.com/Chocapikk/CVE-2022-1388★ 1githubgithub.com/LinJacck/CVE-2022-1388-EXP★ 1githubgithub.com/iveresk/cve-2022-1388-1veresk★ 1githubgithub.com/shamo0/CVE-2022-1388★ 1githubgithub.com/vesperp/CVE-2022-1388-F5-BIG-IP★ 1githubgithub.com/0xAgun/CVE-2022-1388★ 1githubgithub.com/iveresk/cve-2022-1388-iveresk-command-shell★ 1githubgithub.com/Luchoane/CVE-2022-1388_refresh★ 1githubgithub.com/j-baines/tippa-my-tongue★ 1githubgithub.com/yukar1z0e/CVE-2022-1388★ 1githubgithub.com/mr-vill4in/CVE-2022-1388★ 0githubgithub.com/sashka3076/F5-BIG-IP-exploit★ 0githubgithub.com/li8u99/CVE-2022-1388★ 0githubgithub.com/Hudi233/CVE-2022-1388★ 0githubgithub.com/pauloink/CVE-2022-1388★ 0githubgithub.com/Osyanina/westone-CVE-2022-1388-scanner★ 0githubgithub.com/omnigodz/CVE-2022-1388★ 0githubgithub.com/battleofthebots/refresh★ 0githubgithub.com/M4fiaB0y/CVE-2022-1388★ 0githubgithub.com/impost0r/CVE-2022-1388★ 0githubgithub.com/jermainlaforce/CVE-2022-1388-POC★ 0githubgithub.com/Wrin9/CVE-2022-1388★ 0githubgithub.com/On-Cyber-War/CVE-2022-1388★ 0githubgithub.com/SudeepaShiranthaka/F5-BIG-IP-Remote-Code-Execution-Vulnerability-CVE-2022-1388-A-Case-Study★ 0githubgithub.com/jbharucha05/CVE-2022-1388★ 0githubgithub.com/r0otk3r/CVE-2022-1388★ 0vulncheckvulncheck.com/xdb/f633dcc58943no verificadocve_referencepacketstormsecurity.com/files/167118/F5-BIG-IP-16.0.x-Remote-Code-Execution.htmlno verificadocve_referencepacketstormsecurity.com/files/167150/F5-BIG-IP-iControl-Remote-Code-Execution.htmlno verificadovulncheckvulncheck.com/xdb/3fe86ad28ffeno verificadovulncheckvulncheck.com/xdb/792f8d436653no verificadovulncheckvulncheck.com/xdb/f0d43db5ffcbno verificadovulncheckvulncheck.com/xdb/a0cd074f32a8no verificadovulncheckvulncheck.com/xdb/8bb60772cff1no verificadovulncheckvulncheck.com/xdb/5a2182b56ffdno verificadovulncheckvulncheck.com/xdb/502567296299no verificadovulncheckvulncheck.com/xdb/d2f6260efc0fno verificadovulncheckvulncheck.com/xdb/9574cfe06a5cno verificadovulncheckvulncheck.com/xdb/a90a4f4fa523no verificadovulncheckvulncheck.com/xdb/da0ee1760a50no verificadovulncheckvulncheck.com/xdb/3ac3f4ccae08no verificadovulncheckvulncheck.com/xdb/284187c7cc92no verificadovulncheckvulncheck.com/xdb/6f0d150b9526no verificadovulncheckvulncheck.com/xdb/1beebdc63339no verificadovulncheckvulncheck.com/xdb/c5bc057dd650no verificadovulncheckvulncheck.com/xdb/317ac291487cno verificadovulncheckvulncheck.com/xdb/1374857fc440no verificadovulncheckvulncheck.com/xdb/2a3d27be8a50no verificadovulncheckvulncheck.com/xdb/089a0ce1c93ano verificadovulncheckvulncheck.com/xdb/bf15a5b1ddeano verificadovulncheckvulncheck.com/xdb/b187533ab332no verificadovulncheckvulncheck.com/xdb/4f60c165a253no verificadovulncheckvulncheck.com/xdb/39da6fb6bae8no verificadovulncheckvulncheck.com/xdb/fed4ce564309no verificadovulncheckvulncheck.com/xdb/4e0a09831520no verificadovulncheckvulncheck.com/xdb/91f823cf5ee3no verificadovulncheckvulncheck.com/xdb/19a91efb19cbno verificadovulncheckvulncheck.com/xdb/c18be49db148no verificadovulncheckvulncheck.com/xdb/a2fba35605c7no verificadovulncheckvulncheck.com/xdb/e8d37213acfbno verificadovulncheckvulncheck.com/xdb/d47c793055aano verificadovulncheckvulncheck.com/xdb/55c8c0c71985no verificadovulncheckvulncheck.com/xdb/86b7a33d25f4no verificadovulncheckvulncheck.com/xdb/1ce7755efb91no verificadovulncheckvulncheck.com/xdb/7819f0e28fc2no verificadovulncheckvulncheck.com/xdb/0869637d461dno verificadovulncheckvulncheck.com/xdb/e391ecaf162bno verificadovulncheckvulncheck.com/xdb/bd11226cd569no verificadovulncheckvulncheck.com/xdb/92cfa936edecno verificadovulncheckvulncheck.com/xdb/de351a9eaa73no verificadovulncheckvulncheck.com/xdb/7c3dfa418e9dno verificadovulncheckvulncheck.com/xdb/1e755f4e5a91no verificadovulncheckvulncheck.com/xdb/4ecf220a775eno verificadovulncheckvulncheck.com/xdb/dfd966532bd4no verificadovulncheckvulncheck.com/xdb/c5dcb13ada50no verificadovulncheckvulncheck.com/xdb/f8e5e3946332no verificadovulncheckvulncheck.com/xdb/4b67e5ac9d66no verificadovulncheckvulncheck.com/xdb/a338399b9740no verificadovulncheckvulncheck.com/xdb/596c32191ea1no verificadovulncheckvulncheck.com/xdb/eaac7855e8bano verificadovulncheckvulncheck.com/xdb/f174aa99be3ano verificadovulncheckvulncheck.com/xdb/db69e56a1a55no verificadovulncheckvulncheck.com/xdb/d8d92a442a79no verificadovulncheckvulncheck.com/xdb/02a73fcd6f5fno verificadovulncheckvulncheck.com/xdb/fe095bfcae0ano verificadovulncheckvulncheck.com/xdb/49c26aab032eno verificadovulncheckvulncheck.com/xdb/b3ba3d9e25bbno verificadovulncheckvulncheck.com/xdb/e99d73741e42no verificadovulncheckvulncheck.com/xdb/6ee894157174no verificadovulncheckvulncheck.com/xdb/205de2915c78no verificadocve_referencepacketstormsecurity.com/files/167007/F5-BIG-IP-Remote-Code-Execution.htmlno verificadovulncheckvulncheck.com/xdb/5ab1c09d90e2no verificado
⚠ Recursos públicos, para evaluar la exposición de sistemas que controlas o estás autorizado a probar. Prueba solo con autorización.
CVEs relacionadas — F5 BIG-IP

En el mismo producto, de las más peligrosas a las menos.

CVE-2023-46747CRITICALBIG-IP Configuration utility unauthenticated remote code execution vulnerabilityEPSS 96.7%KEVCVE-2026-94127CRITICALBIG-IP APM OAuth vulnerabilityEPSS 26.6%KEVCVE-2023-46748HIGHBIG-IP Configuration utility authenticated SQL injection vulnerabilityEPSS 4.3%KEVCVE-2025-53521CRITICALBigIP APM VulnerabilityEPSS 2.3%KEVCVE-2022-41622HIGHiControl SOAP vulnerabilityEPSS 92.4%CVE-2022-41800HIGHAppliance mode iControl REST vulnerabilityEPSS 76.9%