NOMISEC-savior-only/CVE-2022-1388

NOMISEC WORKING POC
Exploit for CVE-2022-1388 - F5 BIG-IP iControl RCE via REST Authentication Bypass
AI Analysis

This PoC exploits CVE-2022-1388, an authentication bypass vulnerability in F5 BIG-IP iControl REST, allowing unauthenticated remote command execution via a crafted HTTP request to the `/mgmt/tm/util/bash` endpoint.

Attack Type
RCE
Complexity
trivial
Reliability
reliable
MITRE ATT&CK
T1189 - Drive-by Compromise T1210 - Exploitation of Remote Services
Loading exploit code...
Download ZIP Password: eip
Source
Platform Nomisec
Type remote
Files 2
Stars 2
Forks 0
Last Push May 13, 2022
Authors
savior-only
Vulnerability
CVE-2022-1388
F5 BIG-IP iControl RCE via REST Authentication Bypass
CRITICAL KEV
CVSS 9.8