{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-09-21T15:58:53.643","vulnerabilities":[{"cve":{"id":"CVE-2022-41800","sourceIdentifier":"f5sirt@f5.com","published":"2022-12-07T04:15:10.480","lastModified":"2026-06-17T05:03:51.437","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"\nIn all versions of BIG-IP, when running in Appliance mode, an authenticated user assigned the Administrator role may be able to bypass Appliance mode restrictions, utilizing an undisclosed iControl REST endpoint. A successful exploit can allow the attacker to cross a security boundary.  \n\nNote: Software versions which have reached End of Technical Support (EoTS) are not evaluated.\n\n"},{"lang":"es","value":"En todas las versiones de BIG-IP, cuando se ejecuta en modo Dispositivo, un usuario autenticado al que se le haya asignado la función de Administrador puede evitar las restricciones del modo Dispositivo, utilizando un endpoint REST de iControl no revelado. Una explotación exitosa puede permitir al atacante cruzar un límite de seguridad. Nota: Las versiones de software que han llegado al final del soporte técnico (EoTS) no se evalúan."}],"affected":[{"source":"f5sirt@f5.com","affectedData":[{"vendor":"F5","product":"BIG-IP","defaultStatus":"unknown","modules":["iControl REST"],"versions":[{"version":"17.0.x","status":"affected"},{"version":"16.1.x","status":"affected"},{"version":"15.1.x","status":"affected"},{"version":"14.1.x","status":"affected"},{"version":"13.1.x","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"f5sirt@f5.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N","baseScore":8.7,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":2.3,"impactScore":5.8},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N","baseScore":8.7,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":2.3,"impactScore":5.8}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-04-23T13:33:14.653219Z","id":"CVE-2022-41800","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"f5sirt@f5.com","type":"Secondary","description":[{"lang":"en","value":"CWE-77"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-77"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*","versionStartIncluding":"13.1.0","versionEndIncluding":"13.1.5","matchCriteriaId":"D93F04AD-DF14-48AB-9F13-8B2E491CF42E"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*","versionStartIncluding":"14.1.0","versionEndIncluding":"14.1.5","matchCriteriaId":"7522C760-7E07-406F-BF50-5656D5723C4F"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*","versionStartIncluding":"15.1.0","versionEndIncluding":"15.1.8","matchCriteriaId":"9568C6BD-0244-4220-8C95-DBF6C13526F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*","versionStartIncluding":"16.1.0","versionEndIncluding":"16.1.3","matchCriteriaId":"607663E0-4D10-4C6C-8184-29A3EC921A83"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_access_policy_manager:17.0.0:*:*:*:*:*:*:*","matchCriteriaId":"AD637AF5-F7D1-428F-955E-16756B7476E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*","versionStartIncluding":"13.1.0","versionEndIncluding":"17.0.0","matchCriteriaId":"453EB04A-B7BF-4545-9C60-2FA4BDCF93AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*","versionStartIncluding":"13.1.0","versionEndIncluding":"13.1.5","matchCriteriaId":"9167FEC1-2C37-4946-9657-B4E69301FB24"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*","versionStartIncluding":"14.1.0","versionEndIncluding":"14.1.5","matchCriteriaId":"7B4B3442-E0C0-48CD-87AD-060E15C9801E"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*","versionStartIncluding":"15.1.0","versionEndIncluding":"15.1.8","matchCriteriaId":"C7681CBE-A403-49EA-8C0B-00F131330325"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*","versionStartIncluding":"16.1.0","versionEndIncluding":"16.1.3","matchCriteriaId":"2CD3F9E8-9E3D-4B7B-A115-F9080A53BB26"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_analytics:17.0.0:*:*:*:*:*:*:*","matchCriteriaId":"DA0A9081-15D2-44F7-B66E-5C594F7C8066"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*","versionStartIncluding":"13.1.0","versionEndIncluding":"13.1.5","matchCriteriaId":"7EC2324D-EC8B-41DF-88A7-819E53AAD0FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*","versionStartIncluding":"14.1.0","versionEndIncluding":"14.1.5","matchCriteriaId":"9B88F9D1-B54B-40C7-A18A-26C4A071D7EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*","versionStartIncluding":"15.1.0","versionEndIncluding":"15.1.8","matchCriteriaId":"A6E39086-8B18-4F43-A178-43C573F8A196"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*","versionStartIncluding":"16.1.0","versionEndIncluding":"16.1.3","matchCriteriaId":"3E6EC18D-92DB-40E8-AE40-E42CE1B80A6E"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_application_acceleration_manager:17.0.0:*:*:*:*:*:*:*","matchCriteriaId":"EDEBE106-40F1-439C-8154-187D89988C3E"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*","versionStartIncluding":"13.1.0","versionEndIncluding":"13.1.5","matchCriteriaId":"922AA845-530A-4B4B-9976-4CBC30C8A324"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*","versionStartIncluding":"14.1.0","versionEndIncluding":"14.1.5","matchCriteriaId":"F938EB43-8373-47EB-B269-C6DF058A9244"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*","versionStartIncluding":"15.1.0","versionEndIncluding":"15.1.8","matchCriteriaId":"F7ADFEAF-609F-4988-94A9-5270D5AEEBA8"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*","versionStartIncluding":"16.1.0","versionEndIncluding":"16.1.3","matchCriteriaId":"FDBFFF69-214C-4C26-8480-E12D85925857"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_application_security_manager:17.0.0:*:*:*:*:*:*:*","matchCriteriaId":"E9AB53DF-7335-462E-B8CD-44DF0DCE3826"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*","versionStartIncluding":"13.1.0","versionEndIncluding":"13.1.5","matchCriteriaId":"08B25AAB-A98C-4F89-9131-29E3A8C0ED23"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*","versionStartIncluding":"14.1.0","versionEndIncluding":"14.1.5","matchCriteriaId":"ED9B976A-D3AD-4445-BF8A-067C3EBDFBB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*","versionStartIncluding":"15.1.0","versionEndIncluding":"15.1.8","matchCriteriaId":"0080E236-4569-47A4-8C07-FB603809C6D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*","versionStartIncluding":"16.1.0","versionEndIncluding":"16.1.3","matchCriteriaId":"FE0A015C-156A-45A6-9151-186B0E500282"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_domain_name_system:17.0.0:*:*:*:*:*:*:*","matchCriteriaId":"DC4E36FE-C4C7-4C00-A65A-41F50FCE017D"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:*","versionStartIncluding":"13.1.0","versionEndIncluding":"13.1.5","matchCriteriaId":"E3D2ABA3-D4A9-4267-B0DF-7C3BBEEAEB66"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:*","versionStartIncluding":"14.1.0","versionEndIncluding":"14.1.5","matchCriteriaId":"BC36311E-BB00-4750-85C8-51F5A2604F07"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:*","versionStartIncluding":"15.1.0","versionEndIncluding":"15.1.8","matchCriteriaId":"A71D8C13-2393-4AA1-AA20-1876C9BCD0F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:*","versionStartIncluding":"16.1.0","versionEndIncluding":"16.1.3","matchCriteriaId":"11324D07-01CA-42DD-9F4E-8F0D8DD411CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_fraud_protection_service:17.0.0:*:*:*:*:*:*:*","matchCriteriaId":"4D0954BD-CC9C-448F-A9C1-3FB71AB27D6D"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:*","versionStartIncluding":"13.1.0","versionEndIncluding":"13.1.5","matchCriteriaId":"E6018B01-048C-43BB-A78D-66910ED60CA9"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:*","versionStartIncluding":"14.1.0","versionEndIncluding":"14.1.5","matchCriteriaId":"3A6A5686-5A8B-45D5-9165-BC99D2CCAC47"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:*","versionStartIncluding":"15.1.0","versionEndIncluding":"15.1.8","matchCriteriaId":"58714DD4-7338-4587-ACCD-3EB416ABA2DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:*","versionStartIncluding":"16.1.0","versionEndIncluding":"16.1.3","matchCriteriaId":"D5185A28-461D-4066-B272-7AD963302101"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_global_traffic_manager:17.0.0:*:*:*:*:*:*:*","matchCriteriaId":"B04EE3A2-A09D-41C3-A5F2-DAC007041B14"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*","versionStartIncluding":"13.1.0","versionEndIncluding":"13.1.5","matchCriteriaId":"D9EC2237-117F-43BD-ADEC-516CF72E04EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*","versionStartIncluding":"14.1.0","versionEndIncluding":"14.1.5","matchCriteriaId":"F70D4B6F-65CF-48F4-9A07-072DFBCE53D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*","versionStartIncluding":"15.1.0","versionEndIncluding":"15.1.8","matchCriteriaId":"61E86F6C-6668-41D7-8057-009198D5E61D"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*","versionStartIncluding":"16.1.0","versionEndIncluding":"16.1.3","matchCriteriaId":"D87D0A66-B573-4AF9-B13B-50A5D4B062EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_link_controller:17.0.0:*:*:*:*:*:*:*","matchCriteriaId":"A7B147BB-1B2E-4F40-9FA7-1165B8F0B60D"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*","versionStartIncluding":"13.1.0","versionEndIncluding":"13.1.5","matchCriteriaId":"0360F76D-E75E-4B05-A294-B47012323ED9"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*","versionStartIncluding":"14.1.0","versionEndIncluding":"14.1.5","matchCriteriaId":"7A4607BF-41AC-4E84-A110-74E085FF0445"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*","versionStartIncluding":"15.1.0","versionEndIncluding":"15.1.8","matchCriteriaId":"10F40FD2-AB4B-4E95-AB91-6A5A25A7AC77"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*","versionStartIncluding":"16.1.0","versionEndIncluding":"16.1.3","matchCriteriaId":"311E664E-5B35-4B1D-A13B-27B4130A6BE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_local_traffic_manager:17.0.0:*:*:*:*:*:*:*","matchCriteriaId":"73FB842B-33B1-4AD4-AC61-47192A87A785"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*","versionStartIncluding":"13.1.0","versionEndIncluding":"13.1.5","matchCriteriaId":"8257AA59-C14D-4EC1-B22C-DFBB92CBC297"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*","versionStartIncluding":"14.1.0","versionEndIncluding":"14.1.5","matchCriteriaId":"37DB32BB-F4BA-4FB5-94B1-55C3F06749CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*","versionStartIncluding":"15.1.0","versionEndIncluding":"15.1.8","matchCriteriaId":"C57CBDED-6864-413E-933E-3D55F52E3D95"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*","versionStartIncluding":"16.1.0","versionEndIncluding":"16.1.3","matchCriteriaId":"9E224273-270B-464A-A1BD-B58938F87977"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_policy_enforcement_manager:17.0.0:*:*:*:*:*:*:*","matchCriteriaId":"509A4307-3EC4-4AE7-AF72-3C2B3CF9E754"}]}]}],"references":[{"url":"https://support.f5.com/csp/article/K13325942","source":"f5sirt@f5.com","tags":["Vendor Advisory"]},{"url":"https://support.f5.com/csp/article/K13325942","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}}]}