QID 376630

F5 BIG-IP Access Policy Manager (APM) is a secure, flexible, high-performance solution that provides unified global access to your network, cloud, and applications.

This vulnerability may be exploited to allow an attacker to use malicious Dynamic Link Libraries (DLL) to gain privilege escalation on the client Windows system.

Vulnerable Component:
BIG-IP APM

Affected Versions:
16.1.0 - 16.1.2
15.1.0 - 15.1.5
14.1.0 - 14.1.4
13.1.0 - 13.1.4
12.1.0 - 12.1.6
11.6.1 - 11.6.5

QID Detection Logic(Authenticated):
This QID checks for the vulnerable versions of F5 BIG-IP devices using the tmsh command.

This vulnerability may be exploited to allow an attacker to use malicious Dynamic Link Libraries (DLL) to gain privilege escalation on the client Windows system.