[CVE-2022-1388] F5 iControl REST Endpoint Authentication Bypass Technical Deep Dive

CVE

CVE-2022-1388

Published

2022-05-09 20:43

Collected

2026-10-21 15:28

---
id: 10253
title: "[CVE-2022-1388] F5 iControl REST Endpoint Authentication Bypass Technical Deep Dive"
cve: CVE-2022-1388
source_domain: horizon3.ai
source_url: "https://horizon3.ai/attack-research/attack-blogs/f5-icontrol-rest-endpoint-authentication-bypass-technical-deep-dive/"
published_at: "2022-05-09T20:43:04Z"
tags: ["vulnerability-research", "exploit", "cve-2022-1388", "f5", "auth-bypass", "horizon3", "icontrol"]
phying_url: "https://phying.com/item/10253"
lang: en
---

# [CVE-2022-1388] F5 iControl REST Endpoint Authentication Bypass Technical Deep Dive

## Summary

F5 recently patched a critical vulnerability in their BIG-IP iControl REST endpoint CVE-2022-1388. It is simple to exploit and provides an attacker with a method to execute arbitrary system commands.

## Intelligence Metadata

- **Sources:** horizon3.ai
- **CVE:** CVE-2022-1388
- **Published:** 2022-05-09T20:43:04Z
- **Original:** https://horizon3.ai/attack-research/attack-blogs/f5-icontrol-rest-endpoint-authentication-bypass-technical-deep-dive/
- **Phying News:** https://phying.com/item/10253