Test ID:	1.3.6.1.4.1.25623.1.0.105232
Category:	F5 Local Security Checks
Title:	F5 BIG-IP - iControl vulnerability CVE-2014-2928
Summary:	F5 Big-IP is prone to an authenticated code execution vulnerability
Description:	Summary: F5 Big-IP is prone to an authenticated code execution vulnerability Vulnerability Insight: The iControl API in F5 BIG-IP allows remote administrators to execute arbitrary commands via shell metacharacters in the hostname element in a SOAP request. Vulnerability Impact: Users may be able to run arbitrary commands on a BIG-IP system using an authenticated iControl connection. Solution: See the referenced vendor advisory for a solution. CVSS Score: 7.1 CVSS Vector: AV:N/AC:H/Au:S/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2014-2928 http://www.exploit-db.com/exploits/34927 http://seclists.org/fulldisclosure/2014/May/32 http://www.osvdb.org/106728
Copyright	Copyright (C) 2015 Greenbone AG

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.