Published on: 12 March 2021
F5 has published security advisories to address multiple vulnerabilities in F5 devices. The details about the vulnerabilities and associated fixes can be found at the following website:
https://support.f5.com/csp/article/K02566623
Reports indicate that vulnerabilities in F5 BIG-IP (CVE-2021-22986, CVE-2021-22987, CVE-2021-22991 and CVE-2021-22992) could allow a remote attacker to execute arbitrary commands or code on an affected system through specially crafted requests. System administrators are advised to take immediate action to patch your affected systems to mitigate the elevated risk of cyber attacks.
Successful exploitation of the vulnerabilities could lead to arbitrary commands execution, arbitrary code execution, and denial of service of an affected system.
Software updates for affected systems are now available. System administrators of affected systems should follow the recommendations provided by the product vendor and take immediate actions to mitigate the risk. It is recommended to consult the product vendors for the fixes and assistance.
System administrators are advised to follow the security best practice to only permit management access to the products over a secure network and limit shell access to trusted users.