CVE-2022-26071
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2022-26071
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13.1.x versions prior to 13.1.5, and all versions of 12.1.x and 11.6.x, a flaw in the way reply ICMP packets are limited in the Traffic Management Microkernel (TMM) allows an attacker to quickly scan open UDP ports. This flaw allows an off-path remote attacker to effectively bypass source port UDP randomization. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated
Source: NVD (National Vulnerability Database)
CVSS Information
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
Source: NVD (National Vulnerability Database)
Vulnerability Type
使用不充分的随机数
Source: NVD (National Vulnerability Database)
Vulnerability Title
F5 BIG-IP 安全特征问题漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
F5 BIG-IP是美国F5公司的一款集成了网络流量管理、应用程序安全管理、负载均衡等功能的应用交付平台。 F5 BIG-IP 存在安全特征问题漏洞，该漏洞源于流量管理微内核 （TMM） 中应答 ICMP 数据包的限制方式存在缺陷，使得攻击者能够快速扫描打开的 UDP 端口。偏离路径的远程攻击者利用此漏洞可有效地绕过源端口 UDP 随机化。以下产品和版本受到影响：16.1.2.2 之前的 16.1.x 版本、15.1.5.1 之前的 15.1.x 版本、14.1.4.6 之前的 14.1.x 版本、13.
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
II. Public POCs for CVE-2022-26071
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2022-26071
请登录查看更多情报信息。
- https://support.f5.com/csp/article/K41440465x_refsource_MISC
- https://nvd.nist.gov/vuln/detail/CVE-2022-26071
Same Patch Batch · F5 · 2022-05-05 · 43 CVEs total
| CVE-2022-1388 | 9.8 CRITICAL | F5 BIG-IP 访问控制错误漏洞 |
| CVE-2022-25946 | 8.7 HIGH | F5 BIG-IP 安全漏洞 |
| CVE-2022-27806 | 8.7 HIGH | F5 BIG-IP多款产品命令注入漏洞 |
| CVE-2022-28707 | 8.0 HIGH | F5 BIG-IP 跨站脚本漏洞 |
| CVE-2022-29263 | 7.8 HIGH | F5 BIG-IP APM 安全漏洞 |
| CVE-2022-26415 | 7.7 HIGH | F5 BIG-IP 命令注入漏洞 |
| CVE-2022-29491 | 7.5 HIGH | F5 BIG-IP多款产品代码问题漏洞 |
| CVE-2022-27189 | 7.5 HIGH | F5 BIG-IP 安全漏洞 |
| CVE-2022-27230 | 7.5 HIGH | F5 BIG-IP APM 跨站脚本漏洞 |
| CVE-2022-26372 | 7.5 HIGH | F5 BIG-IP 资源管理错误漏洞 |
| CVE-2022-28691 | 7.5 HIGH | F5 BIG-IP 资源管理错误漏洞 |
| CVE-2022-28701 | 7.5 HIGH | F5 BIG-IP 资源管理错误漏洞 |
| CVE-2022-28705 | 7.5 HIGH | F5 BIG-IP 输入验证错误漏洞 |
| CVE-2022-28716 | 7.5 HIGH | F5 BIG-IP 跨站脚本漏洞 |
| CVE-2022-26890 | 7.5 HIGH | 多款F5 BIG-IP产品安全漏洞 |
| CVE-2022-28714 | 7.3 HIGH | F5 BIG-IP 代码问题漏洞 |
| CVE-2022-28695 | 7.2 HIGH | F5 BIG-IP AFM 代码问题漏洞 |
| CVE-2022-27878 | 6.8 MEDIUM | F5 BIG-IP 多款产品跨站脚本漏洞 |
| CVE-2022-27495 | 6.5 MEDIUM | F5 NGINX Service Mesh 访问控制错误漏洞 |
| CVE-2022-27634 | 6.5 MEDIUM | F5 BIG-IP APM 输入验证错误漏洞 |
Showing top 20 of 43 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
Same weakness: CWE-330
- CVE-2026-7847
chatchat-space Langchain-Chatchat Uploaded File openai_route - CVE-2026-40975
VMware Spring Boot 安全特征问题漏洞 - CVE-2026-40496
FreeScout has Predictable Attachment Token that Allows Unaut - CVE-2026-40306
DNN has same HostGUID for all new installs - CVE-2026-33710
Chamilo LMS has Weak REST API Key Generation (Predictable)
V. Comments for CVE-2022-26071
No comments yet