Vulnerabilities CVE-2023-46747

CVE-2023-46747

Medium

Open

KEV

TLP:CLEAR

F5 BIG-IP Configuration Utility Authentication Bypass Vulnerability

NVD CVE.org

AI Analysis

No AI analysis yet.

Description

F5 — BIG-IP Configuration Utility — F5 BIG-IP Configuration utility contains an authentication bypass using an alternate path or channel vulnerability due to undisclosed requests that may allow an unauthenticated attacker with network access to the BIG-IP system through the management port and/or self IP addresses to execute system commands. This vulnerability can be used in conjunction with CVE-2023-46748.

Details

EPSS Score ⓘ: 96.52%

99.9th percentile
Confidence: 100%
CISA KEV
Date Added: Oct 31, 2023
Patch Due: Nov 21, 2023
Required Action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Notes

No notes yet. Click "Add Note" to create the first analysis note.

Opinions

No opinions yet. Be the first to assess this intelligence.