CVE-2023-22358

HIGH

BIG-IP Edge Client <7.2.3.1 - DLL Hijacking

Title source: llm

Description

In versions beginning with 7.2.2 to before 7.2.3.1, a DLL hijacking vulnerability exists in the BIG-IP Edge Client Windows Installer. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

Scores

CVSS v3 7.8
EPSS 0.0022
EPSS Percentile 45.1%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Classification

CWE
CWE-427
Status published

Affected Products (3)

f5/big-ip_access_policy_manager < 7.2.3.1
f5/big-ip_access_policy_manager < 13.1.5
f5/big-ip_edge

Timeline

Published Feb 01, 2023
Tracked Since Feb 18, 2026