CVE-2022-1388

F5 disclosed CVE-2022-1388, a critical authentication-bypass vulnerability in the iControl REST interface of BIG-IP appliances that can lead to remote command execution, file manipulation, and service disruption. The advisory lists affected BIG-IP versions (11.x–16.x branches), provides fixed versions (e.g., v17.0.0, v16.1.2.2, v15.1.5.1, etc.), and recommends applying security updates immediately or temporarily restricting iControl REST access and modifying httpd configuration as mitigations.