IP-DB.com
Türkçe English Deutsch Español
Entrar Obtener clave API
9.8Crítica KEV Usada en ransomware

CVE-2023-46747BIG-IP Configuration utility unauthenticated remote code execution vulnerability

F5 BIG-IP Publicada: (hace 3 años)

Explotación conocida — F5 BIG-IP Configuration Utility Authentication Bypass Vulnerability

CISA confirmó el 31.10.2023 que esta vulnerabilidad se usa en ataques reales. Plazo para las agencias federales de EE. UU.: 21.11.2023.

Acción requerida: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable. https://my.f5.com/manage/s/article/K000137353; https://nvd.nist.gov/vuln/detail/CVE-2023-46747

Descripción

Undisclosed requests may bypass configuration utility authentication, allowing an attacker with network access to the BIG-IP system through the management port and/or self IP addresses to execute arbitrary system commands.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated

Debilidad (CWE): CWE-288CWE-306

Datos: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Se publican tal como los indican las fuentes, en inglés.

Productos y versiones afectados

FabricanteProductoVersiones
F5 BIG-IP 17.1.0, 16.1.0, 15.1.0, 14.1.0, 13.1.0
f5 big-ip access policy manager 13.1.0 – ≤ 13.1.5
f5 big-ip advanced firewall manager 13.1.0 – ≤ 13.1.5
f5 big-ip advanced web application firewall 13.1.0 – ≤ 13.1.5
f5 big-ip analytics 13.1.0 – ≤ 13.1.5
f5 big-ip application acceleration manager 13.1.0 – ≤ 13.1.5
f5 big-ip application security manager 13.1.0 – ≤ 13.1.5
f5 big-ip application visibility and reporting 13.1.0 – ≤ 13.1.5
f5 big-ip automation toolchain 13.1.0 – ≤ 13.1.5
f5 big-ip carrier-grade nat 13.1.0 – ≤ 13.1.5
f5 big-ip container ingress services 13.1.0 – ≤ 13.1.5
f5 big-ip ddos hybrid defender 13.1.0 – ≤ 13.1.5
f5 big-ip domain name system 13.1.0 – ≤ 13.1.5
f5 big-ip fraud protection services 13.1.0 – ≤ 13.1.5
f5 big-ip global traffic manager 13.1.0 – ≤ 13.1.5
f5 big-ip link controller 13.1.0 – ≤ 13.1.5
f5 big-ip local traffic manager 13.1.0 – ≤ 13.1.5
f5 big-ip policy enforcement manager 13.1.0 – ≤ 13.1.5
f5 big-ip ssl orchestrator 13.1.0 – ≤ 13.1.5
f5 big-ip webaccelerator 13.1.0 – ≤ 13.1.5
f5 big-ip websafe 13.1.0 – ≤ 13.1.5

Referencias y parches

Coincidencias CPE (NVD) (60)
  • cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:* ≥ 13.1.0 ≤ 13.1.5
  • cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:* ≥ 14.1.0 ≤ 14.1.5
  • cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:* ≥ 15.1.0 ≤ 15.1.10
  • cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:* ≥ 16.1.0 ≤ 16.1.4
  • cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:* ≥ 17.1.0 ≤ 17.1.1
  • cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:* ≥ 13.1.0 ≤ 13.1.5
  • cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:* ≥ 14.1.0 ≤ 14.1.5
  • cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:* ≥ 15.1.0 ≤ 15.1.10
  • cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:* ≥ 16.1.0 ≤ 16.1.4
  • cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:* ≥ 17.1.0 ≤ 17.1.1
  • cpe:2.3:a:f5:big-ip_advanced_web_application_firewall:*:*:*:*:*:*:*:* ≥ 13.1.0 ≤ 13.1.5
  • cpe:2.3:a:f5:big-ip_advanced_web_application_firewall:*:*:*:*:*:*:*:* ≥ 14.1.0 ≤ 14.1.5
  • cpe:2.3:a:f5:big-ip_advanced_web_application_firewall:*:*:*:*:*:*:*:* ≥ 15.1.0 ≤ 15.1.10
  • cpe:2.3:a:f5:big-ip_advanced_web_application_firewall:*:*:*:*:*:*:*:* ≥ 16.1.0 ≤ 16.1.4
  • cpe:2.3:a:f5:big-ip_advanced_web_application_firewall:*:*:*:*:*:*:*:* ≥ 17.1.0 ≤ 17.1.1
  • cpe:2.3:a:f5:big-ip_carrier-grade_nat:*:*:*:*:*:*:*:* ≥ 13.1.0 ≤ 13.1.5
  • cpe:2.3:a:f5:big-ip_carrier-grade_nat:*:*:*:*:*:*:*:* ≥ 14.1.0 ≤ 14.1.5
  • cpe:2.3:a:f5:big-ip_carrier-grade_nat:*:*:*:*:*:*:*:* ≥ 15.1.0 ≤ 15.1.10
  • cpe:2.3:a:f5:big-ip_carrier-grade_nat:*:*:*:*:*:*:*:* ≥ 16.1.0 ≤ 16.1.4
  • cpe:2.3:a:f5:big-ip_carrier-grade_nat:*:*:*:*:*:*:*:* ≥ 17.1.0 ≤ 17.1.1
  • cpe:2.3:a:f5:big-ip_ddos_hybrid_defender:*:*:*:*:*:*:*:* ≥ 13.1.0 ≤ 13.1.5
  • cpe:2.3:a:f5:big-ip_ddos_hybrid_defender:*:*:*:*:*:*:*:* ≥ 14.1.0 ≤ 14.1.5
  • cpe:2.3:a:f5:big-ip_ddos_hybrid_defender:*:*:*:*:*:*:*:* ≥ 15.1.0 ≤ 15.1.10
  • cpe:2.3:a:f5:big-ip_ddos_hybrid_defender:*:*:*:*:*:*:*:* ≥ 16.1.0 ≤ 16.1.4
  • cpe:2.3:a:f5:big-ip_ddos_hybrid_defender:*:*:*:*:*:*:*:* ≥ 17.1.0 ≤ 17.1.1
  • cpe:2.3:a:f5:big-ip_ssl_orchestrator:*:*:*:*:*:*:*:* ≥ 13.1.0 ≤ 13.1.5
  • cpe:2.3:a:f5:big-ip_ssl_orchestrator:*:*:*:*:*:*:*:* ≥ 14.1.0 ≤ 14.1.5
  • cpe:2.3:a:f5:big-ip_ssl_orchestrator:*:*:*:*:*:*:*:* ≥ 15.1.0 ≤ 15.1.10
  • cpe:2.3:a:f5:big-ip_ssl_orchestrator:*:*:*:*:*:*:*:* ≥ 16.1.0 ≤ 16.1.4
  • cpe:2.3:a:f5:big-ip_ssl_orchestrator:*:*:*:*:*:*:*:* ≥ 17.1.0 ≤ 17.1.1
  • cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:* ≥ 13.1.0 ≤ 13.1.5
  • cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:* ≥ 14.1.0 ≤ 14.1.5
  • cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:* ≥ 15.1.0 ≤ 15.1.10
  • cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:* ≥ 16.1.0 ≤ 16.1.4
  • cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:* ≥ 17.1.0 ≤ 17.1.1
  • cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:* ≥ 13.1.0 ≤ 13.1.5
  • cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:* ≥ 14.1.0 ≤ 14.1.5
  • cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:* ≥ 15.1.0 ≤ 15.1.10
  • cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:* ≥ 16.1.0 ≤ 16.1.4
  • cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:* ≥ 17.1.0 ≤ 17.1.1
  • cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:* ≥ 13.1.0 ≤ 13.1.5
  • cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:* ≥ 14.1.0 ≤ 14.1.5
  • cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:* ≥ 15.1.0 ≤ 15.1.10
  • cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:* ≥ 16.1.0 ≤ 16.1.4
  • cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:* ≥ 17.1.0 ≤ 17.1.1
  • cpe:2.3:a:f5:big-ip_automation_toolchain:*:*:*:*:*:*:*:* ≥ 13.1.0 ≤ 13.1.5
  • cpe:2.3:a:f5:big-ip_automation_toolchain:*:*:*:*:*:*:*:* ≥ 14.1.0 ≤ 14.1.5
  • cpe:2.3:a:f5:big-ip_automation_toolchain:*:*:*:*:*:*:*:* ≥ 15.1.0 ≤ 15.1.10
  • cpe:2.3:a:f5:big-ip_automation_toolchain:*:*:*:*:*:*:*:* ≥ 16.1.0 ≤ 16.1.4
  • cpe:2.3:a:f5:big-ip_automation_toolchain:*:*:*:*:*:*:*:* ≥ 17.1.0 ≤ 17.1.1
  • cpe:2.3:a:f5:big-ip_container_ingress_services:*:*:*:*:*:*:*:* ≥ 13.1.0 ≤ 13.1.5
  • cpe:2.3:a:f5:big-ip_container_ingress_services:*:*:*:*:*:*:*:* ≥ 14.1.0 ≤ 14.1.5
  • cpe:2.3:a:f5:big-ip_container_ingress_services:*:*:*:*:*:*:*:* ≥ 15.1.0 ≤ 15.1.10
  • cpe:2.3:a:f5:big-ip_container_ingress_services:*:*:*:*:*:*:*:* ≥ 16.1.0 ≤ 16.1.4
  • cpe:2.3:a:f5:big-ip_container_ingress_services:*:*:*:*:*:*:*:* ≥ 17.1.0 ≤ 17.1.1
  • cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:* ≥ 13.1.0 ≤ 13.1.5
  • cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:* ≥ 14.1.0 ≤ 14.1.5
  • cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:* ≥ 15.1.0 ≤ 15.1.10
  • cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:* ≥ 16.1.0 ≤ 16.1.4
  • cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:* ≥ 17.1.0 ≤ 17.1.1

CVE recientes del mismo producto — F5 BIG-IP

9.8Crítica
CVE-2026-94127 KEV

BIG-IP APM OAuth vulnerability

F5 BIG-IP

When a BIG-IP APM access policy and an OAuth profile are configured on a virtual server, specific malicious traffic can lead to remote code execution (RCE). This vulnerability is only present when BIG-IP APM is configured as an OAuth Authorization Server. Dep…

27%EPSS
3.1Baja
CVE-2026-63020

BIG-IP Configuration utility vulnerability

F5 BIG-IP

A vulnerability exists in an undisclosed BIG-IP Configuration utility page that may allow an attacker to spoof error messages  Impact: An attacker may trick authenticated BIG-IP users into accessing malicious links and reflect a spoofed error message …

8.8Alta
CVE-2026-66842

BIG-IP and BIG-IQ Configuration utility vulnerability

F5 BIG-IP; F5 BIG-IQ

BIG-IP has a vulnerability where an authenticated user of any role may be able to create administrative user accounts through an undisclosed request to Traffic Management User Interface (TMUI). Impact: This vulnerability may allow an authenticated attack…

7.5Alta
CVE-2026-59762

BIG-IP HTTP/2 vulnerability

F5 BIG-IP; F5 BIG-IP Next for Kubernetes; F5 BIG-IP Next SPK; F5 BIG-IP Next CNF

When an HTTP/2 profile is configured on a virtual server, undisclosed requests can cause an increase in memory resource utilization.   Impact: System performance can degrade until the TMM process is either forced to restart or is manually restarted. …

7.5Alta
CVE-2026-40423

BIG-IP SIP profile vulnerability

F5 BIG-IP

When a SIP profile is configured on a virtual server, undisclosed traffic can cause the Traffic Management Microkernel (TMM) to terminate.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

6.8Media
CVE-2026-24464

Appliance mode iControl REST vulnerability

F5 BIG-IP

When running in Appliance mode, a directory traversal vulnerability exists in an undisclosed iControl REST endpoint that may allow an authenticated attacker with administrator role privileges to cross a security boundary and delete files.  Note: Software vers…