What is the Attack?
\nThe vulnerability allows an unauthenticated attacker to exploit an authentication bypass vulnerability in F5 BIG-IP system. The exploit requires a network access through the management port to execute arbitrary system commands. F5 has warned their customers that threat actors are actively exploiting the vulnerability.<\/p>\n
What is the Vendor Solution?<\/p>\n
F5 has released relevant firmware updates for the affected products. For more information, visit here.<\/p>\n
What FortiGuard Coverage is available?<\/p>\n
FortiGuard Labs has an IPS signature “F5.BIG-IP.TMUI.AJP.Smuggling.Authentication.Bypass” to detect and block any attack targeting the vulnerability.<\/p>\n