Description
A format string vulnerability exists in iControl SOAP that allows an authenticated attacker to crash the iControl SOAP CGI process or, potentially execute arbitrary code. In appliance mode BIG-IP, a successful exploit of this vulnerability can allow the attacker to cross a security boundary. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
F5 BIG-IP
Default version status: unknown
17.0.0 to < 17.1.0affected16.1.2.2 to < 16.1.3.4affected15.1.5.1 to < 15.1.8.2affected14.1.4.6 to < 14.1.5.4affected13.1.5 to < *affected