Patch now! BIG-IP Configuration utility is vulnerable for an authentication bypass

Tech company F5 has warned customers about a critical authentication bypass vulnerability impacting its BIG-IP product line that could result in unauthenticated remote code execution.

F5 provides services focused on security, reliability, and performance. BIG-IP is a collection of hardware platforms and software solutions that provides a wide range of services, including load balancing, web application firewall, access control, and DDoS protection.

Two security researchers found a critical vulnerability in the configuration utility of several versions of BIG-IP:

• 17.1.0 (Fixed …

authentication authentication bypass big big-ip bypass bypass vulnerability code code execution collection configuration critical customers hardware patch performance platforms product reliability remote code remote code execution result security services software solutions tech unauthenticated utility vulnerability vulnerable