CVE-2021-23022: 
F5 BIG-IP Virtual Edition vulnerability analysis and mitigation

CVE-2021-23022 is a security vulnerability affecting the BIG-IP Edge Client Windows Installer Service. The vulnerability was discovered in version 7.2.1.x before 7.2.1.3 and 7.1.x before 7.1.9.9 Update 1, where the temporary folder has weak file and folder permissions. The vulnerability was initially recorded on January 6, 2021, and was publicly disclosed in June 2021 (CVE Details).

The vulnerability is classified as an incorrect permission assignment for critical resource (CWE-732). It received a CVSS v3.1 Base Score of 7.8 (HIGH) with the vector string CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating local access requirements with low attack complexity and privilege requirements, no user interaction needed, and high impacts on confidentiality, integrity, and availability (NVD Database).

The vulnerability's high severity rating indicates significant potential impact on affected systems. With a CVSS score of 7.8, the vulnerability could lead to complete compromise of system confidentiality, integrity, and availability if exploited (NVD Database).

The vulnerability requires local access with low attack complexity and privilege requirements. No user interaction is needed for exploitation, making it a significant security concern for affected systems (NVD Database).

F5 Networks has released patches to address this vulnerability. Users should upgrade to version 7.2.1.3 or 7.1.9.9 Update 1 or later versions of the BIG-IP Edge Client Windows Installer Service (Vendor Advisory).