F5: 악용된 취약점
- 8악용된 취약점
- 4랜섬웨어에 사용됨
- 2026. 9. 22.가장 최근 추가
- BIG-IP 3
- BIG-IP Configuration Utility 2
- BIG-IP APM 1
- BIG-IP Traffic Management Microkernel 1
- BIG-IP and BIG-IQ Centralized Management 1
| 추가됨 | 취약점 | 제품 | 심각도 | 공격 가능성 |
|---|---|---|---|---|
| 2026. 9. 22. | Heap-based Buffer Overflow | BIG-IP APM | 치명적 9.3 | 25% |
| 2026. 3. 27. | Stack-Based Buffer Overflow | BIG-IP | 치명적 9.3 | 2.3% |
| 2023. 10. 31. | SQL Injection | BIG-IP Configuration Utility | 높음 8.8 | 4.5% |
| 2023. 10. 31. | Authentication Bypass | BIG-IP Configuration Utility | 치명적 9.8 | 97% |
| 2022. 5. 10. | Missing Authentication | BIG-IP | 치명적 9.8 | >99.9% |
| 2022. 1. 18. | Buffer Overflow | BIG-IP Traffic Management Microkernel | 치명적 9.8 | 62% |
| 2021. 11. 3. | iControl REST Remote Code Execution | BIG-IP and BIG-IQ Centralized Management | 치명적 9.8 | 99.9% |
| 2021. 11. 3. | Traffic Management User Interface (TMUI) Remote Code Execution | BIG-IP | 치명적 9.8 | >99.9% |
출처: Known Exploited Vulnerabilities(CISA, 퍼블릭 도메인), CVE records(cve.org), EPSS(FIRST). 공격 가능성은 누군가 향후 30일 안에 이 결함을 악용하려 할 확률에 대한 EPSS 추정치입니다.