Attacker Value
Unknown
(0 users assessed)
Exploitability
Unknown
(0 users assessed)
User Interaction
Required
Privileges Required
None
Attack Vector
Local
0

CVE-2022-28714

Disclosure Date: May 04, 2022
Add MITRE ATT&CK tactics and techniques that apply to this CVE.

Description

On F5 BIG-IP APM 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13.1.x versions prior to 13.1.5, and all versions of 12.1.x and 11.6.x, as well as F5 BIG-IP APM Clients 7.x versions prior to 7.2.1.5, a DLL Hijacking vulnerability exists in the BIG-IP Edge Client Windows Installer. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated

Add Assessment

No one has assessed this topic. Be the first to add your voice to the community.

CVSS V3 Severity and Metrics
Base Score:
7.8 High
Impact Score:
5.9
Exploitability Score:
1.8
Vector:
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Attack Vector (AV):
Local
Attack Complexity (AC):
Low
Privileges Required (PR):
None
User Interaction (UI):
Required
Scope (S):
Unchanged
Confidentiality (C):
High
Integrity (I):
High
Availability (A):
High

General Information

Vendors

  • f5

Products

  • big-ip access policy manager 11.6.1,
  • big-ip access policy manager 11.6.2,
  • big-ip access policy manager 11.6.3,
  • big-ip access policy manager 11.6.4,
  • big-ip access policy manager 11.6.5,
  • big-ip access policy manager 12.1.0,
  • big-ip access policy manager 12.1.1,
  • big-ip access policy manager 12.1.2,
  • big-ip access policy manager 12.1.3,
  • big-ip access policy manager 12.1.4,
  • big-ip access policy manager 12.1.5,
  • big-ip access policy manager 12.1.6,
  • big-ip access policy manager 13.1.0,
  • big-ip access policy manager 13.1.1,
  • big-ip access policy manager 13.1.3,
  • big-ip access policy manager 13.1.4,
  • big-ip access policy manager 13.1.5,
  • big-ip access policy manager 14.1.0,
  • big-ip access policy manager 14.1.2,
  • big-ip access policy manager 14.1.3,
  • big-ip access policy manager 14.1.4,
  • big-ip access policy manager 15.1.0,
  • big-ip access policy manager 15.1.1,
  • big-ip access policy manager 15.1.2,
  • big-ip access policy manager 15.1.3,
  • big-ip access policy manager 15.1.4,
  • big-ip access policy manager 15.1.5,
  • big-ip access policy manager 16.1.0,
  • big-ip access policy manager 16.1.1,
  • big-ip access policy manager 16.1.2,
  • big-ip access policy manager 17.0.0,
  • big-ip access policy manager client 7.1.5,
  • big-ip access policy manager client 7.1.6,
  • big-ip access policy manager client 7.1.6.1,
  • big-ip access policy manager client 7.1.7,
  • big-ip access policy manager client 7.1.8,
  • big-ip access policy manager client 7.1.8.2,
  • big-ip access policy manager client 7.1.9,
  • big-ip access policy manager client 7.2.1

Additional Info

Technical Analysis