Skip to content
1.
Part two documents in-the-wild CVE-2022-1388 exploitation on F5 BIG-IP in Vietnam: attackers scan exposed interfaces, POST to /mgmt/tm/util/bash for RCE, then plant webshells from May 7, 2022.
← back | CVE Intelligence
CVE-2022-1388
Curated 3 security research writeups, vulnerability advisories and exploitation analyses for CVE-2022-1388.
- Coverage Span
- 2022-05-10 → 2022-05-26
- Reports
- 3 related reports
Associated Reports & Timeline
2.
blog.viettelcybersecurity.com | vulnerability | | original ↗ | #rce | #authentication-bypass | #vulnerability-analysis | #f5
Part one explains CVE-2022-1388: an auth bypass in F5 BIG-IP iControl REST (CVSS 9.8) enabling unauthenticated RCE, dissecting how Apache forwards /mgmt requests to Jetty and token validation fails.
3.
Bishop Fox released a scanner that fingerprints exact F5 BIG-IP software versions from HTTP responses, helping defenders quickly assess exposure to CVE-2022-1388, a critical auth-bypass RCE.