CVEvulnerability

CVE-2014-2928

7.1 HIGH Published 2014-05-12 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2014-05-12
Last modified
2026-06-17
Assigner
[email protected]
CVSS 2.0 ([email protected])
7.1 HIGH — AV:N/AC:H/Au:S/C:C/I:C/A:C

Description

The iControl API in F5 BIG-IP LTM, APM, ASM, GTM, Link Controller, and PSM 10.0.0 through 10.2.4 and 11.0.0 through 11.5.1, BIG-IP AAM 11.4.0 through 11.5.1, BIG-IP AFM and PEM 11.3.0 through 11.5.1, BIG-IP Analytics 11.0.0 through 11.5.1, BIG-IP Edge Gateway, WebAccelerator, WOM 10.1.0 through 10.2.4 and 11.0.0 through 11.3.0, Enterprise Manager 2.1.0 through 2.3.0 and 3.0.0 through 3.1.1, and BIG-IQ Cloud, Device, and Security 4.0.0 through 4.3.0 allows remote administrators to execute arbitrary commands via shell metacharacters in the hostname element in a SOAP request.

Affected configurations

• f5 big-ip webaccelerator 9.4.0 • f5 big-ip webaccelerator 9.4.1 • f5 big-ip webaccelerator 9.4.2 • f5 big-ip webaccelerator 9.4.3 • f5 big-ip webaccelerator 9.4.4 • f5 big-ip webaccelerator 9.4.5 • f5 big-ip webaccelerator 9.4.6 • f5 big-ip webaccelerator 9.4.7 • f5 big-ip webaccelerator 9.4.8 • f5 big-ip webaccelerator 10.0.0 • f5 big-ip webaccelerator 10.0.1 • f5 big-ip webaccelerator 10.1.0 • f5 big-ip webaccelerator 10.2.0 • f5 big-ip webaccelerator 10.2.1 • f5 big-ip webaccelerator 10.2.2 • f5 big-ip webaccelerator 10.2.3 • f5 big-ip webaccelerator 10.2.4 • f5 big-ip webaccelerator 11.0.0 • f5 big-ip webaccelerator 11.1.0 • f5 big-ip webaccelerator 11.2.0 • f5 big-ip webaccelerator 11.2.1 • f5 big-ip webaccelerator 11.3.0 • f5 big-ip local traffic manager 10.0.0 • f5 big-ip local traffic manager 10.0.1 • f5 big-ip local traffic manager 10.1.0 • f5 big-ip local traffic manager 10.2.0 • f5 big-ip local traffic manager 10.2.1 • f5 big-ip local traffic manager 10.2.2 • f5 big-ip local traffic manager 11.0.0 • f5 big-ip protocol security module 9.4.5 • f5 big-ip protocol security module 9.4.6 • f5 big-ip protocol security module 9.4.7 • f5 big-ip protocol security module 9.4.8 • f5 big-ip protocol security module 10.0.0 • f5 big-ip protocol security module 10.0.1 • f5 big-ip protocol security module 10.1.0 • f5 big-ip protocol security module 10.2.0 • f5 big-ip protocol security module 10.2.1 • f5 big-ip protocol security module 10.2.2 • f5 big-ip protocol security module 10.2.3 • f5 big-ip protocol security module 10.2.4 • f5 big-ip protocol security module 11.0.0 • f5 big-ip protocol security module 11.1.0 • f5 big-ip protocol security module 11.2.0 • f5 big-ip protocol security module 11.2.1 • f5 big-ip protocol security module 11.3.0 • f5 big-ip protocol security module 11.4.0 • f5 big-ip protocol security module 11.4.1 • f5 big-ip link controller 10.0.0 • f5 big-ip link controller 10.0.1 • f5 big-ip link controller 10.1.0 • f5 big-ip link controller 10.2.0 • f5 big-ip link controller 10.2.1 • f5 big-ip link controller 10.2.2 • f5 big-ip link controller 11.0.0 • f5 big-ip application security manager 10.0.0 • f5 big-ip application security manager 10.0.1 • f5 big-ip application security manager 10.1.0 • f5 big-ip application security manager 10.2.0 • f5 big-ip application security manager 10.2.1 … and 26 more

References