CVE-2023-46747

No fix known ExploitedEPSS 97%CVSS 9.8

Undisclosed requests may bypass configuration utility authentication, allowing an attacker with network access to the BIG-IP system through the management port and/or self IP addresses to execute arbitrary system commands.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated

Published 2023-10-26 · In CISA KEV since 2023-10-31 · CVE record · OSV

Products: F5 BIG-IP