VDB
CNVD-2023-82300
CNVD-2023-82300
PUBLISHED
CVSS 9.800000190734863 CRITICAL
F5 BIG-IP是F5公司的一款集成了网络流量编排、负载均衡、智能DNS,远程接入策略管理等功能的应用交付平台。 F5 BIG-IP存在远程代码执行漏洞,该漏洞是由配置实用程序身份验证绕过缺陷引起的。攻击者可利用该漏洞在系统上执行任意系统命令。
Risk Scores
CVSS 3.1
9.800000190734863
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| F5 | BIG-IP | 17.1.0, 16.1.0, 13.1.0 |
Timeline
- Oct 26, 2023 CVE Published
- Oct 31, 2023 PoC Published
- Oct 31, 2023 PoC Published
- Nov 2, 2023 PoC Published
- Nov 3, 2023 PoC Published
- Oct 15, 2024 PoC Published
- Dec 22, 2024 PoC Published
- Dec 24, 2024 PoC Published
- Dec 24, 2024 PoC Published
- Jan 31, 2025 PoC Published
- Feb 6, 2025 PoC Published
- Feb 23, 2025 PoC Published
References
- https://my.f5.com/manage/s/article/K000137353 vendor-advisory
- http://packetstormsecurity.com/files/175673/F5-BIG-IP-TMUI-AJP-Smuggling-Remote-Command-Execution.html url
- https://www.secpod.com/blog/f5-issues-warning-big-ip-vulnerability-used-in-active-exploit-chain/ url
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-46747 url