mickmick.net

F5 BIG-IP Remote Code Execution Vulnerability

Release Date: 27 Oct 2023

RISK: Medium Risk

TYPE: Operating Systems - Networks OS

A vulnerability was identified in F5 BIG-IP. A remote attacker could exploit this vulnerability to trigger remote code execution on the targeted system.

---

Impact

• Remote Code Execution

---

System / Technologies affected

BIG-IP

 

• 17.1.0
• 16.1.0 - 16.1.4
• 15.1.0 - 15.1.10
• 14.1.0 - 14.1.5
• 13.1.0 - 13.1.5

 

---

Solutions

Before installation of the software, please visit the vendor web-site for more details.

 

Apply fixes issued by the vendor:

• https://my.f5.com/manage/s/article/K000137353

---

Vulnerability Identifier

• CVE-2023-46747

---

Source

• AusCERT
• F5

---

Related Link

https://my.f5.com/manage/s/article/K000137353