F5 Networks BIG-IP : TMUI authenticated remote command execution vulnerability (K70031188)

high Nessus Plugin ID 147624

Version 1.10

Oct 22, 2026, 12:02 AM

  • Detection (corrected module name from AM to AAM; version now includes hotfix level in scan results. corrected version threshold, removing a false positive on a specific hotfix. corrected version ranges across several modules for more accurate detection)
  • Logic Changes (restored a KB flag used by other scan checks. updated to current plugin format. restricts detection to systems with the Configuration utility component installed. restricts detection to affected hardware models. restricts detection to systems with affected components installed)

Plugin Feed: 202610220002

Version 1.9

May 10, 2024, 12:25 PM

  • IAVM reference

Plugin Feed: 202405101225

Version 1.8

Nov 2, 2023, 8:18 PM

  • CVE (set "CVE" coverage to "CVE-2021-22988")
  • CVSS metrics ("CVSSv3 score" set to 8.8. "CVSSv3 vector" set to "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H")
  • CVSSv3 score source (changed from "CVE-2021-22987" to none)
  • Detection (updated detection logic)
  • Plugin metadata

Plugin Feed: 202311022018

Version 1.7

Dec 6, 2022, 6:53 AM

  • Reference

Plugin Feed: 202212060653

Version 1.7

Nov 2, 2023, 6:19 PM

  • CVE (set "CVE" coverage to "CVE-2021-22988")
  • CVSS metrics ("CVSSv3 score" set to 8.8)
  • CVSS metrics ("CVSSv3 vector" set to "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H")
  • CVSSv3 score source (changed from "CVE-2021-22987" to none)
  • Detection (updated detection logic)
  • Plugin metadata

Plugin Feed: 202311021819

* Changelogs are generally available for changes made after Nov 1, 2022