CVE-2022-23009

CVE-2022-23009 describes a critical vulnerability in F5 BIG-IQ Centralized Management versions 8.x prior to 8.1.0, where an authenticated administrative user on a BIG-IQ managed BIG-IP device can gain unauthorized access to other BIG-IP devices managed by the same BIG-IQ system. This vulnerability carries a CVSS score of 7.2 (High), indicating a network-based attack with low complexity, requiring high privileges, and leading to high impact on confidentiality, integrity, and availability. While there is no evidence of active exploitation, public exploit code, or KEV listing, the vulnerability has received limited community discussion and media coverage.