CVE-2022-25946
Severity Score
6.5
*CVSS v3.1
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
On all versions of 16.1.x, 15.1.x, 14.1.x, 13.1.x, 12.1.x, and 11.6.x of F5 BIG-IP Advanced WAF, ASM, and ASM, and F5 BIG-IP Guided Configuration (GC) all versions prior to 9.0, when running in Appliance mode, an authenticated attacker with Administrator role privilege may be able to bypass Appliance mode restrictions due to a missing integrity check in F5 BIG-IP Guided Configuration. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated
En todas las versiones de 16.1.x, 15.1.x, 14.1.x, 13.1.x, 12.1.x y 11.6.x de F5 BIG-IP Advanced WAF, ASM y ASM, y F5 BIG-IP Guided Configuration (GC) todas las versiones anteriores a 9.0, cuando es ejecutado en modo Appliance, un atacante autenticado con privilegios de rol de administrador puede ser capaz de omitir las restricciones del modo Appliance debido a una falta de comprobación de integridad en F5 BIG-IP Guided Configuration. Nota: Las versiones de software que han alcanzado el Fin del Soporte Técnico (EoTS) no son evaluadas
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2022-04-19 CVE Reserved
- 2022-05-05 CVE Published
- 2023-11-26 EPSS Updated
- 2024-09-17 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-354: Improper Validation of Integrity Check Value
CAPEC
References (1)
| URL | Tag | Source |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| https://support.f5.com/csp/article/K52322100 | 2022-05-16 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| F5 Search vendor "F5" | Big-ip Access Policy Manager Search vendor "F5" for product "Big-ip Access Policy Manager" | 13.1.0 Search vendor "F5" for product "Big-ip Access Policy Manager" and version "13.1.0" | - |
Affected
| ||||||
| F5 Search vendor "F5" | Big-ip Access Policy Manager Search vendor "F5" for product "Big-ip Access Policy Manager" | 13.1.1 Search vendor "F5" for product "Big-ip Access Policy Manager" and version "13.1.1" | - |
Affected
| ||||||
| F5 Search vendor "F5" | Big-ip Access Policy Manager Search vendor "F5" for product "Big-ip Access Policy Manager" | 13.1.3 Search vendor "F5" for product "Big-ip Access Policy Manager" and version "13.1.3" | - |
Affected
| ||||||
| F5 Search vendor "F5" | Big-ip Access Policy Manager Search vendor "F5" for product "Big-ip Access Policy Manager" | 13.1.4 Search vendor "F5" for product "Big-ip Access Policy Manager" and version "13.1.4" | - |
Affected
| ||||||
| F5 Search vendor "F5" | Big-ip Access Policy Manager Search vendor "F5" for product "Big-ip Access Policy Manager" | 13.1.5 Search vendor "F5" for product "Big-ip Access Policy Manager" and version "13.1.5" | - |
Affected
| ||||||
| F5 Search vendor "F5" | Big-ip Access Policy Manager Search vendor "F5" for product "Big-ip Access Policy Manager" | 14.1.0 Search vendor "F5" for product "Big-ip Access Policy Manager" and version "14.1.0" | - |
Affected
| ||||||
| F5 Search vendor "F5" | Big-ip Access Policy Manager Search vendor "F5" for product "Big-ip Access Policy Manager" | 14.1.2 Search vendor "F5" for product "Big-ip Access Policy Manager" and version "14.1.2" | - |
Affected
| ||||||
| F5 Search vendor "F5" | Big-ip Access Policy Manager Search vendor "F5" for product "Big-ip Access Policy Manager" | 14.1.3 Search vendor "F5" for product "Big-ip Access Policy Manager" and version "14.1.3" | - |
Affected
| ||||||
| F5 Search vendor "F5" | Big-ip Access Policy Manager Search vendor "F5" for product "Big-ip Access Policy Manager" | 14.1.4 Search vendor "F5" for product "Big-ip Access Policy Manager" and version "14.1.4" | - |
Affected
| ||||||
| F5 Search vendor "F5" | Big-ip Access Policy Manager Search vendor "F5" for product "Big-ip Access Policy Manager" | 15.1.0 Search vendor "F5" for product "Big-ip Access Policy Manager" and version "15.1.0" | - |
Affected
| ||||||
| F5 Search vendor "F5" | Big-ip Access Policy Manager Search vendor "F5" for product "Big-ip Access Policy Manager" | 15.1.1 Search vendor "F5" for product "Big-ip Access Policy Manager" and version "15.1.1" | - |
Affected
| ||||||
| F5 Search vendor "F5" | Big-ip Access Policy Manager Search vendor "F5" for product "Big-ip Access Policy Manager" | 15.1.2 Search vendor "F5" for product "Big-ip Access Policy Manager" and version "15.1.2" | - |
Affected
| ||||||
| F5 Search vendor "F5" | Big-ip Access Policy Manager Search vendor "F5" for product "Big-ip Access Policy Manager" | 15.1.3 Search vendor "F5" for product "Big-ip Access Policy Manager" and version "15.1.3" | - |
Affected
| ||||||
| F5 Search vendor "F5" | Big-ip Access Policy Manager Search vendor "F5" for product "Big-ip Access Policy Manager" | 15.1.4 Search vendor "F5" for product "Big-ip Access Policy Manager" and version "15.1.4" | - |
Affected
| ||||||
| F5 Search vendor "F5" | Big-ip Access Policy Manager Search vendor "F5" for product "Big-ip Access Policy Manager" | 15.1.5 Search vendor "F5" for product "Big-ip Access Policy Manager" and version "15.1.5" | - |
Affected
| ||||||
| F5 Search vendor "F5" | Big-ip Access Policy Manager Search vendor "F5" for product "Big-ip Access Policy Manager" | 16.1.0 Search vendor "F5" for product "Big-ip Access Policy Manager" and version "16.1.0" | - |
Affected
| ||||||
| F5 Search vendor "F5" | Big-ip Access Policy Manager Search vendor "F5" for product "Big-ip Access Policy Manager" | 16.1.1 Search vendor "F5" for product "Big-ip Access Policy Manager" and version "16.1.1" | - |
Affected
| ||||||
| F5 Search vendor "F5" | Big-ip Access Policy Manager Search vendor "F5" for product "Big-ip Access Policy Manager" | 16.1.2 Search vendor "F5" for product "Big-ip Access Policy Manager" and version "16.1.2" | - |
Affected
| ||||||
| F5 Search vendor "F5" | Big-ip Advanced Web Application Firewall Search vendor "F5" for product "Big-ip Advanced Web Application Firewall" | 13.1.0 Search vendor "F5" for product "Big-ip Advanced Web Application Firewall" and version "13.1.0" | - |
Affected
| ||||||
| F5 Search vendor "F5" | Big-ip Advanced Web Application Firewall Search vendor "F5" for product "Big-ip Advanced Web Application Firewall" | 13.1.1 Search vendor "F5" for product "Big-ip Advanced Web Application Firewall" and version "13.1.1" | - |
Affected
| ||||||
| F5 Search vendor "F5" | Big-ip Advanced Web Application Firewall Search vendor "F5" for product "Big-ip Advanced Web Application Firewall" | 13.1.3 Search vendor "F5" for product "Big-ip Advanced Web Application Firewall" and version "13.1.3" | - |
Affected
| ||||||
| F5 Search vendor "F5" | Big-ip Advanced Web Application Firewall Search vendor "F5" for product "Big-ip Advanced Web Application Firewall" | 13.1.4 Search vendor "F5" for product "Big-ip Advanced Web Application Firewall" and version "13.1.4" | - |
Affected
| ||||||
| F5 Search vendor "F5" | Big-ip Advanced Web Application Firewall Search vendor "F5" for product "Big-ip Advanced Web Application Firewall" | 13.1.5 Search vendor "F5" for product "Big-ip Advanced Web Application Firewall" and version "13.1.5" | - |
Affected
| ||||||
| F5 Search vendor "F5" | Big-ip Advanced Web Application Firewall Search vendor "F5" for product "Big-ip Advanced Web Application Firewall" | 14.1.0 Search vendor "F5" for product "Big-ip Advanced Web Application Firewall" and version "14.1.0" | - |
Affected
| ||||||
| F5 Search vendor "F5" | Big-ip Advanced Web Application Firewall Search vendor "F5" for product "Big-ip Advanced Web Application Firewall" | 14.1.2 Search vendor "F5" for product "Big-ip Advanced Web Application Firewall" and version "14.1.2" | - |
Affected
| ||||||
| F5 Search vendor "F5" | Big-ip Advanced Web Application Firewall Search vendor "F5" for product "Big-ip Advanced Web Application Firewall" | 14.1.3 Search vendor "F5" for product "Big-ip Advanced Web Application Firewall" and version "14.1.3" | - |
Affected
| ||||||
| F5 Search vendor "F5" | Big-ip Advanced Web Application Firewall Search vendor "F5" for product "Big-ip Advanced Web Application Firewall" | 14.1.4 Search vendor "F5" for product "Big-ip Advanced Web Application Firewall" and version "14.1.4" | - |
Affected
| ||||||
| F5 Search vendor "F5" | Big-ip Advanced Web Application Firewall Search vendor "F5" for product "Big-ip Advanced Web Application Firewall" | 15.1.0 Search vendor "F5" for product "Big-ip Advanced Web Application Firewall" and version "15.1.0" | - |
Affected
| ||||||
| F5 Search vendor "F5" | Big-ip Advanced Web Application Firewall Search vendor "F5" for product "Big-ip Advanced Web Application Firewall" | 15.1.1 Search vendor "F5" for product "Big-ip Advanced Web Application Firewall" and version "15.1.1" | - |
Affected
| ||||||
| F5 Search vendor "F5" | Big-ip Advanced Web Application Firewall Search vendor "F5" for product "Big-ip Advanced Web Application Firewall" | 15.1.2 Search vendor "F5" for product "Big-ip Advanced Web Application Firewall" and version "15.1.2" | - |
Affected
| ||||||
| F5 Search vendor "F5" | Big-ip Advanced Web Application Firewall Search vendor "F5" for product "Big-ip Advanced Web Application Firewall" | 15.1.3 Search vendor "F5" for product "Big-ip Advanced Web Application Firewall" and version "15.1.3" | - |
Affected
| ||||||
| F5 Search vendor "F5" | Big-ip Advanced Web Application Firewall Search vendor "F5" for product "Big-ip Advanced Web Application Firewall" | 15.1.4 Search vendor "F5" for product "Big-ip Advanced Web Application Firewall" and version "15.1.4" | - |
Affected
| ||||||
| F5 Search vendor "F5" | Big-ip Advanced Web Application Firewall Search vendor "F5" for product "Big-ip Advanced Web Application Firewall" | 15.1.5 Search vendor "F5" for product "Big-ip Advanced Web Application Firewall" and version "15.1.5" | - |
Affected
| ||||||
| F5 Search vendor "F5" | Big-ip Advanced Web Application Firewall Search vendor "F5" for product "Big-ip Advanced Web Application Firewall" | 16.1.0 Search vendor "F5" for product "Big-ip Advanced Web Application Firewall" and version "16.1.0" | - |
Affected
| ||||||
| F5 Search vendor "F5" | Big-ip Advanced Web Application Firewall Search vendor "F5" for product "Big-ip Advanced Web Application Firewall" | 16.1.1 Search vendor "F5" for product "Big-ip Advanced Web Application Firewall" and version "16.1.1" | - |
Affected
| ||||||
| F5 Search vendor "F5" | Big-ip Advanced Web Application Firewall Search vendor "F5" for product "Big-ip Advanced Web Application Firewall" | 16.1.2 Search vendor "F5" for product "Big-ip Advanced Web Application Firewall" and version "16.1.2" | - |
Affected
| ||||||
| F5 Search vendor "F5" | Big-ip Application Security Manager Search vendor "F5" for product "Big-ip Application Security Manager" | 13.1.0 Search vendor "F5" for product "Big-ip Application Security Manager" and version "13.1.0" | - |
Affected
| ||||||
| F5 Search vendor "F5" | Big-ip Application Security Manager Search vendor "F5" for product "Big-ip Application Security Manager" | 13.1.1 Search vendor "F5" for product "Big-ip Application Security Manager" and version "13.1.1" | - |
Affected
| ||||||
| F5 Search vendor "F5" | Big-ip Application Security Manager Search vendor "F5" for product "Big-ip Application Security Manager" | 13.1.3 Search vendor "F5" for product "Big-ip Application Security Manager" and version "13.1.3" | - |
Affected
| ||||||
| F5 Search vendor "F5" | Big-ip Application Security Manager Search vendor "F5" for product "Big-ip Application Security Manager" | 13.1.4 Search vendor "F5" for product "Big-ip Application Security Manager" and version "13.1.4" | - |
Affected
| ||||||
| F5 Search vendor "F5" | Big-ip Application Security Manager Search vendor "F5" for product "Big-ip Application Security Manager" | 13.1.5 Search vendor "F5" for product "Big-ip Application Security Manager" and version "13.1.5" | - |
Affected
| ||||||
| F5 Search vendor "F5" | Big-ip Application Security Manager Search vendor "F5" for product "Big-ip Application Security Manager" | 14.1.0 Search vendor "F5" for product "Big-ip Application Security Manager" and version "14.1.0" | - |
Affected
| ||||||
| F5 Search vendor "F5" | Big-ip Application Security Manager Search vendor "F5" for product "Big-ip Application Security Manager" | 14.1.2 Search vendor "F5" for product "Big-ip Application Security Manager" and version "14.1.2" | - |
Affected
| ||||||
| F5 Search vendor "F5" | Big-ip Application Security Manager Search vendor "F5" for product "Big-ip Application Security Manager" | 14.1.3 Search vendor "F5" for product "Big-ip Application Security Manager" and version "14.1.3" | - |
Affected
| ||||||
| F5 Search vendor "F5" | Big-ip Application Security Manager Search vendor "F5" for product "Big-ip Application Security Manager" | 14.1.4 Search vendor "F5" for product "Big-ip Application Security Manager" and version "14.1.4" | - |
Affected
| ||||||
| F5 Search vendor "F5" | Big-ip Application Security Manager Search vendor "F5" for product "Big-ip Application Security Manager" | 15.1.0 Search vendor "F5" for product "Big-ip Application Security Manager" and version "15.1.0" | - |
Affected
| ||||||
| F5 Search vendor "F5" | Big-ip Application Security Manager Search vendor "F5" for product "Big-ip Application Security Manager" | 15.1.1 Search vendor "F5" for product "Big-ip Application Security Manager" and version "15.1.1" | - |
Affected
| ||||||
| F5 Search vendor "F5" | Big-ip Application Security Manager Search vendor "F5" for product "Big-ip Application Security Manager" | 15.1.2 Search vendor "F5" for product "Big-ip Application Security Manager" and version "15.1.2" | - |
Affected
| ||||||
| F5 Search vendor "F5" | Big-ip Application Security Manager Search vendor "F5" for product "Big-ip Application Security Manager" | 15.1.3 Search vendor "F5" for product "Big-ip Application Security Manager" and version "15.1.3" | - |
Affected
| ||||||
| F5 Search vendor "F5" | Big-ip Application Security Manager Search vendor "F5" for product "Big-ip Application Security Manager" | 15.1.4 Search vendor "F5" for product "Big-ip Application Security Manager" and version "15.1.4" | - |
Affected
| ||||||
| F5 Search vendor "F5" | Big-ip Application Security Manager Search vendor "F5" for product "Big-ip Application Security Manager" | 15.1.5 Search vendor "F5" for product "Big-ip Application Security Manager" and version "15.1.5" | - |
Affected
| ||||||
| F5 Search vendor "F5" | Big-ip Application Security Manager Search vendor "F5" for product "Big-ip Application Security Manager" | 16.1.0 Search vendor "F5" for product "Big-ip Application Security Manager" and version "16.1.0" | - |
Affected
| ||||||
| F5 Search vendor "F5" | Big-ip Application Security Manager Search vendor "F5" for product "Big-ip Application Security Manager" | 16.1.1 Search vendor "F5" for product "Big-ip Application Security Manager" and version "16.1.1" | - |
Affected
| ||||||
| F5 Search vendor "F5" | Big-ip Application Security Manager Search vendor "F5" for product "Big-ip Application Security Manager" | 16.1.2 Search vendor "F5" for product "Big-ip Application Security Manager" and version "16.1.2" | - |
Affected
| ||||||
| F5 Search vendor "F5" | Big-ip Guided Configuration Search vendor "F5" for product "Big-ip Guided Configuration" | <= 9.0 Search vendor "F5" for product "Big-ip Guided Configuration" and version " <= 9.0" | - |
Affected
| ||||||