CVE-2021-22980: 
F5 BIG-IP Virtual Edition vulnerability analysis and mitigation

In Edge Client version 7.2.x before 7.2.1.1, 7.1.9.x before 7.1.9.8, and 7.1.x-7.1.8.x before 7.1.8.5, an untrusted search path vulnerability exists in the BIG-IP APM Client Troubleshooting Utility (CTU) for Windows. This vulnerability could allow an attacker to load a malicious DLL library from its current directory. The vulnerability was discovered and disclosed in February 2021 (CVE Mitre).

The vulnerability is classified as an untrusted search path vulnerability affecting the BIG-IP APM Client Troubleshooting Utility on Windows systems. The issue stems from improper handling of DLL loading paths, which could allow an attacker to execute malicious code through a specially crafted DLL placed in the utility's current directory. The vulnerability has been assigned a CVSS score of 8.5, indicating a high severity level (NVD).

If successfully exploited, this vulnerability could allow an attacker to execute arbitrary code with elevated privileges through a malicious DLL library. However, user interaction is required as the victim must run the troubleshooting utility on the Windows system for the exploit to be successful (CVE Mitre).

The vulnerability requires user interaction to be exploited, as the victim must actively run the Client Troubleshooting Utility on their Windows system. An attacker would need to place a malicious DLL in the utility's current directory for the exploit to be successful (NVD).

The vulnerability has been patched in Edge Client versions 7.2.1.1, 7.1.9.8, and 7.1.8.5. Users are advised to upgrade to these or newer versions to mitigate the risk. Software versions which have reached End of Software Development (EoSD) are not evaluated (CVE Mitre).