This vulnerability in F5 BIG-IP DNS involves improper neutralization of special elements in an undisclosed iControl REST and tmsh command, enabling command injection. Authenticated users with elevated roles can execute arbitrary system commands with higher privileges, potentially crossing security boundaries in Appliance mode deployments. The issue affects multiple BIG-IP versions and has a CVSS 3.1 base score of 6.5 (medium severity). No vendor advisory or patch information is currently available, and the product is not a cloud service, so remediation is the responsibility of the user.

Successful exploitation allows an authenticated Resource Administrator or Administrator to execute arbitrary system commands with elevated privileges, potentially leading to unauthorized control over the system. In Appliance mode, this can result in crossing security boundaries, increasing the risk of system compromise. There are no reports of active exploitation in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict access to users with Resource Administrator or Administrator roles and monitor for suspicious activity related to iControl REST and tmsh commands. Follow F5's security best practices for access control and privilege management.