Skip to main content
cvebuzz

CVE mentions, exploit signals, and PoC evidence in one fast public view.

CVE detail

CVE-2021-22986

On BIG-IP versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.2.1, 14.1.x before 14.1.4, 13.1.x before 13.1.3.6, and 12.1.x before 12.1.5.3 amd BIG-IQ 7.1.0.x before 7.1.0.3 and 7.0.0.x before 7.0.0.2, the iControl REST interface has an unauthenticated remote command execution vulnerability. Note: Software versions which have reached End of Software Development (EoSD) are not evaluated.

CVSS 9.8 · CriticalBuzz score 63.5KEV listed

Buzz score

Why this CVE is surfacing

Buzz score total 63.5

This all-time snapshot uses the same composite formula as Trending across a 30-year evidence window, rather than a current rolling window.

Buzz score components · mention 24.0 · diversity 14.5 · KEV 25.0 · OTX 0.0 · PoC 0.0
Mention score
24.0
10 evidence mentions in the snapshot
Diversity score
14.5
5 sources across 2 categories
KEV score
25.0
Known exploited vulnerability present
OTX score
0.0
0 OTX pulses
PoC score
0.0
0 repos · best confidence N/A
Best PoC traction
0
Maximum stars on a matched PoC repo

Why it matters now

Mention timeline

Total mentions
0
within the 30d window
Peak daily
0
highest bucket

Evidence

Source links by recency

Newest mentions first
10 source links · newest first
  • Top CVEs to Patch: Insights from the 2022 Unit 42 Network Threat Trends Research ReportUnit42

    The 2022 Unit 42 Network Threat Trends Research Report includes an analysis of the CVEs most commonly exploited in 2021 and predictions for which CVEs attackers will likely focus on in the year to come.

    vendorunit42.paloaltonetworks.comJul 21, 2022, 1:00 PM
  • Technical Details, IoCs Available for Actively Exploited BIG-IP VulnerabilitySecurityWeek

    Indicators of compromise (IoCs) and other resources have been released to help defenders deal with the actively exploited F5 BIG-IP vulnerability tracked as CVE-2022-1388.

    newswww.securityweek.comMay 10, 2022, 11:26 AM
  • Critical F5 BIG-IP flaw allows device takeover, patch ASAP! (CVE-2022-1388)Help Net Security

    F5 Networks‘ BIG-IP multi-purpose networking devices/modules are vulnerable to unauthenticated remote code execution attacks via CVE-2022-1388. “This vulnerability may allow an unauthenticated attacker with network access to the BIG-IP system through the management port and/or self IP addresses to execute arbitrary system commands, create or delete files, or disable services,” F5 warned yesterday. About CVE-2022-1388 CVE-2022-1388 allows undisclosed requests to bypass iControl REST authentication – just like CVE-2021-22986, which has been patched in March 2021 … More →

    newswww.helpnetsecurity.comMay 5, 2022, 10:57 AM
  • French Ministry of Justice Targeted in Ransomware AttackSecurityWeek

    Cybercriminals claim to have breached systems belonging to France’s Ministry of Justice and they are threatening to make public the files stolen from the government organization.

    newswww.securityweek.comJan 27, 2022, 4:12 PM
  • Network Attack Trends: February-April 2021Unit42

    Network attack trends for February-April 2021 include a continued focus from attackers on high-impact, low-effort attacks.

    vendorunit42.paloaltonetworks.comJul 1, 2021, 10:00 PM
  • 22nd March – Threat Intelligence ReportCheck Point Research

    For the latest discoveries in cyber research for the week of 22nd March, please download our Threat Intelligence Bulletin. Top Attacks and Breaches Taiwanese electronics giant Acer has been hit by The REvil ransomware group, demanding a 50 million USD ransom in exchange for their file recovery and data privacy. Check Point SandBlast and SandBlast […]

    vendorresearch.checkpoint.comMar 22, 2021, 5:05 PM
  • Security Affairs newsletter Round 306Security Affairs

    A new round of the weekly SecurityAffairs newsletter arrived! Every week the best security articles from Security Affairs free for you in your email box. If you want to also receive for free the international press subscribe here. Experts found 15 flaws in Netgear JGS516PE switch, including a critical RCE Google releases Spectre PoC code exploit […]

    newssecurityaffairs.comMar 21, 2021, 11:33 AM
  • Threat actors are attempting to exploit CVE-2021-22986 in F5 BIG-IP devices in the wildSecurity Affairs

    Cybersecurity experts warn of ongoing attacks aimed at exploiting a recently patched critical vulnerability in F5 BIG-IP and BIG-IQ networking devices. Cybersecurity experts from NCC Group and Bad Packets security firm this week detected a wave of attacks exploiting a recently patched critical vulnerability, tracked as CVE-2021-22986, in F5 BIG-IP and BIG-IQ networking devices. “After seeing lots […]

    newssecurityaffairs.comMar 19, 2021, 9:42 PM
  • F5 addresses critical vulnerabilities in BIG-IP and BIG-IQSecurity Affairs

    Security firm F5 announced the availability of patches for seven vulnerabilities in BIG-IP, four of which have been rated as “critical” severity. BIG-IP product family includes hardware, modularized software, and virtual appliances that run the F5 TMOS operating system and provides load balancing, firewall, access control, threat protection capabilities. The vendor has released security updates for seven […]

    newssecurityaffairs.comMar 11, 2021, 8:22 AM
  • F5 Patches Four Critical Bugs in Big-IP SuiteSecurityWeek

    Application services and network delivery firm F5 on Wednesday announced the release of patches for seven related vulnerabilities in BIG-IP, including four with a “critical” severity rating.

    newswww.securityweek.comMar 10, 2021, 8:25 PM

Exploit code

Public exploit repository references

Public PoC repositories are third-party, potentially unsafe artifacts. Treat their code as untrusted and use it only on authorized systems in an isolated, least-privilege environment. cvebuzz does not execute the code or verify that an exploit works.

0 repository references · best confidence N/A · max 0 stars
No public PoC repositories have been matched yet.

Related records

Similar CVEs

6 related CVEs with shared weakness or product evidence