What is CVE-2023-22657?

CVE-2023-22657 is a high-severity vulnerability in F5 F5os-a, classified under Command Injection. CVSS score: 7.0/10. Published 2023-02-01.

How severe is CVE-2023-22657?

High severity. CVSS v3 base score is 7.0 out of 10.

RCE in F5 F5os-a

CVE-2023-22657

On F5OS-A beginning in version 1.2.0 to before 1.3.0 and F5OS-C beginning in version 1.3.0 to before 1.5.0, processing F5OS tenant file names may allow for command injection. Note: Software versions which have reached End of Technical Sup…

Vulnerability class: Command Injection (OS Command Injection)

EPSS: 0.004 (36.0th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.0 (High). Vector: CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H.

Affected products

F5 F5os-a — versions 1.2.0
F5 F5os-c — versions 1.3.0

Weakness classification (CWE)

CWE-77 — Command Injection

References

f5sirt@f5.com (Vendor Advisory)

Frequently asked questions

What is CVE-2023-22657?: CVE-2023-22657 is a high-severity vulnerability in F5 F5os-a, classified under Command Injection. CVSS score: 7.0/10. Published 2023-02-01.
How severe is CVE-2023-22657?: High severity. CVSS v3 base score is 7.0 out of 10.