Skip to content
OpenAdvisories
High · 8.7 CVE-2023-43746 EUVD-2023-48125GHSA-r7qm-xv29-cxj4

BIG-IP Appliance mode external monitor vulnerability

Published Oct 10, 2023 · Updated Sep 18, 2024 · Assigned by f5

Description

When running in Appliance mode, an authenticated user assigned the Administrator role may be able to bypass Appliance mode restrictions, utilizing BIG-IP external monitor on a BIG-IP system.  A successful exploit can allow the attacker to cross a security boundary.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

Affected products

VendorProductAffectedFixed
F5 BIG-IP 16.1.0 – < 16.1.4, 15.1.0 – < 15.1.9, 14.1.0, 13.1.0 16.1.4

References