Sploitus

CVE-2022-1388

62 known exploits for CVE-2022-1388

On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13.1.x versions prior to 13.1.5, and all 12.1.x and 11.6.x versions, undisclosed requests may bypass iControl REST authentication. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated

Affected products
Big-Ip
f5 Big-ip Access Policy Manager
≤ 11.6.5, 12.1.6, 13.1.5, 14.1.4.6, 15.1.5.1, 16.1.2.2
f5 Big-ip Advanced Firewall Manager
≤ 11.6.5, 12.1.6, 13.1.5, 14.1.4.6, 15.1.5.1, 16.1.2.2
f5 Big-ip Analytics
≤ 11.6.5, 12.1.6, 13.1.5, 14.1.4.6, 15.1.5.1, 16.1.2.2
f5 Big-ip Application Acceleration Manager
≤ 11.6.5, 12.1.6, 13.1.5, 14.1.4.6, 15.1.5.1, 16.1.2.2
f5 Big-ip Application Security Manager
≤ 11.6.5, 12.1.6, 13.1.5, 14.1.4.6, 15.1.5.1, 16.1.2.2
f5 Big-ip Domain Name System
≤ 11.6.5, 12.1.6, 13.1.5, 14.1.4.6, 15.1.5.1, 16.1.2.2
Fix
Available
CVSS 3.1
9.8 CRITICAL
EPSS
100.0% (100th percentile)
Weakness
CWE-306
NVD status
Analyzed
Published
2022-05-05
CVE-2022-1388 at NVD
Authoritative description, scoring and affected products

62 known exploits for CVE-2022-1388

Proof-of-concept code and exploit modules indexed by Sploitus

Exploit for Missing Authentication for Critical Function in F5 Big-Ip_Access_Policy_Manager
2025-07-12 r0otk3rGITHUB
Exploit for Missing Authentication for Critical Function in F5 Big-Ip_Access_Policy_Manager
2024-11-23 XiaomingXGITHUB
Exploit for Missing Authentication for Critical Function in F5 Big-Ip_Access_Policy_Manager
2024-04-30 gotr00t0dayGITHUB
Exploit for Missing Authentication for Critical Function in F5 Big-Ip_Access_Policy_Manager
2024-01-09 nico989GITHUB
Exploit for Missing Authentication for Critical Function in F5 Big-Ip_Access_Policy_Manager
2023-08-01 battleofthebotsGITHUB
Exploit for Missing Authentication for Critical Function in F5 Big-Ip_Access_Policy_Manager
2023-04-12 j-bainesGITHUB
Exploit for Missing Authentication for Critical Function in F5 Big-Ip_Access_Policy_Manager
2022-12-24 vaelwolfGITHUB
Exploit for Missing Authentication for Critical Function in F5 Big-Ip_Access_Policy_Manager
2022-12-21 devengpkGITHUB
Exploit for Missing Authentication for Critical Function in F5 Big-Ip_Access_Policy_Manager
2022-12-06 amitlttwoGITHUB
Exploit for Missing Authentication for Critical Function in F5 Big-Ip_Access_Policy_Manager
2022-11-30 revanmalangGITHUB
Exploit for Missing Authentication for Critical Function in F5 Big-Ip_Access_Policy_Manager
2022-11-30 gabriellaabigailGITHUB
Exploit for Missing Authentication for Critical Function in F5 Big-Ip_Access_Policy_Manager
2022-10-25 OnCyberWarGITHUB
Exploit for Missing Authentication for Critical Function in F5 Big-Ip_Access_Policy_Manager
2022-10-25 forktheplanetGITHUB
Exploit for Missing Authentication for Critical Function in F5 Big-Ip_Access_Policy_Manager
2022-07-04 jbharucha05GITHUB
Exploit for Missing Authentication for Critical Function in F5 Big-Ip_Access_Policy_Manager
2022-07-01 LuchoaneGITHUB
Exploit for Missing Authentication for Critical Function in F5 Big-Ip_Access_Policy_Manager
2022-06-20 ChocapikkGITHUB
Exploit for Path Traversal in F5 Big-Ip_Access_Policy_Manager
2022-05-28 west9bGITHUB
Exploit for Missing Authentication for Critical Function in F5 Big-Ip_Access_Policy_Manager
2022-05-17 aancwGITHUB
Exploit for Missing Authentication for Critical Function in F5 Big-Ip_Access_Policy_Manager
2022-05-16 Wrin9GITHUB
Exploit for Missing Authentication for Critical Function in F5 Big-Ip_Access_Policy_Manager
2022-05-15 ivereskGITHUB
Exploit for Missing Authentication for Critical Function in F5 Big-Ip_Access_Policy_Manager
2022-05-15 PsychoSec2GITHUB
Exploit for Missing Authentication for Critical Function in F5 Big-Ip_Access_Policy_Manager
2022-05-13 justakazhGITHUB
F5 BIG-IP iControl REST vulnerability
2022-05-13 SAINT CorporationSAINT
F5 BIG-IP iControl REST vulnerability
2022-05-13 SAINT CorporationSAINT
Exploit for Missing Authentication for Critical Function in F5 Big-Ip_Access_Policy_Manager
2022-05-12 Zeyad-AzimaGITHUB
Exploit for Missing Authentication for Critical Function in F5 Big-Ip_Access_Policy_Manager
2022-05-12 SecTheBitGITHUB
F5 BIG-IP iControl Remote Code Execution
2022-05-12 Alt3kx, Ron Bowes, Heyder Andrade, James Horseman, metasploit.comPACKETSTORMRuby
F5 BIG-IP 16.0.x Remote Code Execution
2022-05-12 Yesith AlvarezPACKETSTORMPython
F5 BIG-IP 16.0.x - Remote Code Execution (RCE)
2022-05-12 Yesith AlvarezEXPLOITDBPython
Exploit for Missing Authentication for Critical Function in F5 Big-Ip_Access_Policy_Manager
2022-05-11 omnigodzGITHUB
Exploit for Missing Authentication for Critical Function in F5 Big-Ip_Access_Policy_Manager
2022-05-11 EvilLizard666GITHUB
Exploit for Missing Authentication for Critical Function in F5 Big-Ip_Access_Policy_Manager
2022-05-11 AmirHoseinTangsiriNETGITHUB
Exploit for Missing Authentication for Critical Function in F5 Big-Ip_Access_Policy_Manager
2022-05-10 0x7eTeamGITHUB
Exploit for Missing Authentication for Critical Function in F5 Big-Ip_Access_Policy_Manager
2022-05-10 aodsecGITHUB
Exploit for Missing Authentication for Critical Function in F5 Big-Ip_Access_Policy_Manager
2022-05-10 bandit92GITHUB
Exploit for Missing Authentication for Critical Function in F5 Big-Ip_Access_Policy_Manager
2022-05-10 thatonesecguyGITHUB
Exploit for Missing Authentication for Critical Function in F5 Big-Ip_Access_Policy_Manager
2022-05-10 shamo0GITHUB
Exploit for Missing Authentication for Critical Function in F5 Big-Ip_Access_Policy_Manager
2022-05-10 LinJacckGITHUB
Exploit for Missing Authentication for Critical Function in F5 Big-Ip_Access_Policy_Manager
2022-05-10 Angus-TeamGITHUB
Exploit for Missing Authentication for Critical Function in F5 Big-Ip_Access_Policy_Manager
2022-05-10 qusaialhaddadGITHUB
Exploit for Missing Authentication for Critical Function in F5 Big-Ip_Access_Policy_Manager
2022-05-10 StonzyyGITHUB
Exploit for Missing Authentication for Critical Function in F5 Big-Ip_Access_Policy_Manager
2022-05-10 MrCl0wnLabGITHUB
Exploit for Missing Authentication for Critical Function in F5 Big-Ip_Access_Policy_Manager
2022-05-09 superzerosecGITHUB
Exploit for Missing Authentication for Critical Function in F5 Big-Ip_Access_Policy_Manager
2022-05-09 saucer-manGITHUB
Exploit for Missing Authentication for Critical Function in F5 Big-Ip_Access_Policy_Manager
2022-05-09 Al1exGITHUB
Exploit for Missing Authentication for Critical Function in F5 Big-Ip_Access_Policy_Manager
2022-05-09 horizon3aiGITHUB
Exploit for Missing Authentication for Critical Function in F5 Big-Ip_Access_Policy_Manager
2022-05-09 ZephrFishGITHUB
Exploit for Missing Authentication for Critical Function in F5 Big-Ip_Access_Policy_Manager
2022-05-09 VulnmachinesGITHUB
Exploit for Missing Authentication for Critical Function in F5 Big-Ip_Access_Policy_Manager
2022-05-09 alt3kxGITHUB
Exploit for Missing Authentication for Critical Function in F5 Big-Ip_Access_Policy_Manager
2022-05-09 0xf4n9xGITHUB
Exploit for Missing Authentication for Critical Function in F5 Big-Ip_Access_Policy_Manager
2022-05-09 yukar1z0eGITHUB
Exploit for Missing Authentication for Critical Function in F5 Big-Ip_Access_Policy_Manager
2022-05-09 sherlocksecurityGITHUB
F5 BIG-IP Remote Code Execution
2022-05-09 Alt3kx, github.comPACKETSTORM
Exploit for Missing Authentication for Critical Function in F5 Big-Ip_Access_Policy_Manager
2022-05-09 sherlocksecurityGITHUB
Exploit for Missing Authentication for Critical Function in F5 Big-Ip_Access_Policy_Manager
2022-05-09 Hudi233GITHUB
Exploit for Missing Authentication for Critical Function in F5 Big-Ip_Access_Policy_Manager
2022-05-08 blind-intruderGITHUB
Exploit for Missing Authentication for Critical Function in F5 Big-Ip_Access_Policy_Manager
2022-05-07 doocopGITHUB
Exploit for Missing Authentication for Critical Function in F5 Big-Ip_Access_Policy_Manager
2022-05-07 ByteCapsGITHUB
Exploit for Missing Authentication for Critical Function in F5 Big-Ip_Access_Policy_Manager
2022-05-07 hackeyesGITHUB
Exploit for Missing Authentication for Critical Function in F5 Big-Ip_Access_Policy_Manager
2022-05-06 MrCl0wnLabGITHUB
Exploit for Missing Authentication for Critical Function in F5 Big-Ip_Access_Policy_Manager
2022-05-05 numanturleGITHUB
F5 BIG-IP iControl RCE via REST Authentication Bypass
2022-05-04 Heyder Andrade, alt3kx <alt3kx@protonmail.com>, James Horseman, Ron BowesMETASPLOITRuby