Skip to content
OpenAdvisories
High 2 exploited CVEs WID-SEC-2023-2762 2 CVEs

F5 BIG-IP: Mehrere Schwachstellen

Published Oct 26, 2023 · Updated Oct 31, 2023 · Revision 2 · de-DE

Vendor: F5 Product: BIG-IP Product: BIG-IP < 13.1.5.1 Product: BIG-IP < 14.1.5.6 Product: BIG-IP < 15.1.10.2 Product: BIG-IP < 16.1.4.1 Product: BIG-IP < 17.1.0.3

Summary

Ein entfernter Angreifer kann mehrere Schwachstellen in F5 BIG-IP ausnutzen, um Sicherheitsmaßnahmen zu umgehen und beliebigen Code auszuführen.

Product

F5 FirePass ist ein SSL-VPN Gateway der F5 Corporation. Die BIG-IP ist eine Netzwerk Appliance auf der die meisten F5 Produkte laufen.

Vulnerabilities 2

  • Critical 9.8
    CVE-2023-46747 Exploited · Ransomware Public exploit Scanner template EPSS 97%

    BIG-IP Configuration utility unauthenticated remote code execution vulnerability

    Undisclosed requests may bypass configuration utility authentication, allowing an attacker with network access to the BIG-IP system through the management port and/or self IP addresses to execute arbitrary system commands.  Note: Software versions which have …

    F5 BIG-IP Network devices
    KEV Oct 31, 2023
  • High 8.8
    CVE-2023-46748 Exploited

    BIG-IP Configuration utility authenticated SQL injection vulnerability

    An authenticated SQL injection vulnerability exists in the BIG-IP Configuration utility which may allow an authenticated attacker with network access to the Configuration utility through the BIG-IP management port and/or self IP addresses to execute arbitrary…

    F5 BIG-IP Network devices
    KEV Oct 31, 2023

Revision history

  1. #2

    Exploit aufgenommen

  2. #1

    Initiale Fassung

References