F5 iControl REST and BIG-IP TMOS Shell Command Injection Vulnerability

A command injection vulnerability has been identified in the iControl REST interface and the BIG-IP TMOS Shell (tmsh) save command. This vulnerability may allow an authenticated attacker to execute arbitrary system commands. Note that software versions that have reached End of Technical Support (EoTS) are not evaluated.

Impact

Exploitation of this vulnerability could lead to unauthorized execution of system commands, potentially allowing for further exploitation of the system or application.