Free

CVE Series: F5 BIG-IP (CVE-2022-1388)

The BIG-IP iControl REST vulnerability (CVE-2022-1388) is a critical flaw that allows unauthenticated attackers to execute system root-level commands remotely. This vulnerability was given a CVSS score of 9.8 due to how easy it is to exploit and the level of access it grants attackers. Learn how to exploit and mitigate this vulnerability today!
1
20
M
Time
intermediate
difficulty
2
ceu/cpe

Course Content

Mitigation

10m

The F5 BIG-IP (CVE-2022-1388)
Exploitation

0m

The F5 BIG-IP (CVE-2022-1388)
CVE Overview

10m

The F5 BIG-IP (CVE-2022-1388)
Course Description

Who should take this course?

This course is for seasoned red teamers, penetration testers, security and vulnerability assessment analysts, and system administrators who want to know how to exploit and protect against the latest vulnerabilities impacting enterprise systems.

What makes this course different from other courses on similar topics?

After completing this course, you will be able to:

  • Define the attack, describe its root cause, and communicate its significance to key organizational stakeholders
  • Perform the attack with publicly available exploit code
  • Mitigate the attack using multiple different methods
  • This course is taught by Raymond Evans, a member of the CyDefe team. CyDefe develops and operates capture-the-flag (CTF) style environments, and this course focuses on presenting learners with virtual labs where you can directly apply what you've learned.

    Why should I take this course on Cybrary and not somewhere else?

    This on-demand course gives you the hands-on experience needed to protect and defend your organization against the critical vulnerability. In one hour, offensive and defensive security professionals can become more prepared to defend their organization against this flaw that could allow an adversary to cause significant damage on a victim system. In this course, you will see just how quick and easy it is to exploit this vulnerability from the perspective of an adversary. You will be able to not only exploit and mitigate this critical vulnerability, but also describe its significance to organizational stakeholders.

    This course is part of a Career Path:
    No items found.

    Instructed by

    Instructor
    Raymond Evans
    Provider
    Cybrary Logo
    Certification Body
    Certificate of Completion

    Complete this entire course to earn a CVE Series: F5 BIG-IP (CVE-2022-1388) Certificate of Completion