VDB

CVE-2023-41085

CVE-2023-41085 PUBLISHED CVSS 7.5 HIGH

When IPSec is configured on a Virtual Server, undisclosed traffic can cause TMM to terminate.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

EPSS 0.58% · 69.2th percentile

Risk Scores

CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS Score
0.58%
69.2th percentile

Affected Products

VendorProductVersions
f5big-ip_global_traffic_manager15.1.0, 16.1.0, 13.1.0
f5big-ip_fraud_protection_service14.1.0, 16.1.0, 15.1.0
f5big-ip_local_traffic_manager13.1.0, 14.1.0, 15.1.0
f5big-ip_carrier-grade_nat14.1.0, 13.1.0, 16.1.0
f5big-ip_policy_enforcement_manager14.1.0, 16.1.0, 15.1.0
f5big-ip_application_visibility_and_reporting16.1.0, 15.1.0, 14.1.0
f5big-ip_advanced_firewall_manager16.1.0, 15.1.0, 13.1.0
F5BIG-IP14.1.0, 15.1.0, 16.1.0
f5big-ip_analytics16.1.0, 14.1.0, 15.1.0
f5big-ip_websafe15.1.0, 13.1.0, 14.1.0
f5big-ip_access_policy_manager13.1.0, 16.1.0, 15.1.0
f5big-ip_application_acceleration_manager14.1.0, 13.1.0, 15.1.0
f5big-ip_advanced_web_application_firewall13.1.0, 16.1.0, 15.1.0
f5big-ip_ssl_orchestrator16.1.0, 13.1.0, 14.1.0
f5big-ip_application_security_manager14.1.0, 13.1.0, 16.1.0
f5big-ip_edge_gateway16.1.0, 13.1.0, 15.1.0
f5big-ip_link_controller14.1.0, 16.1.0, 13.1.0
f5big-ip_domain_name_system14.1.0, 16.1.0, 15.1.0
f5big-ip_webaccelerator13.1.0, 16.1.0, 15.1.0
f5big-ip_ddos_hybrid_defender13.1.0, 15.1.0, 14.1.0

Exploit Intelligence

Timeline

  • Oct 10, 2023 CVE Published
  • Oct 10, 2023 PoC Published
  • Oct 11, 2023 EPSS Score
  • Nov 11, 2023 EPSS Score
  • Dec 13, 2023 EPSS Score
  • Jan 13, 2024 EPSS Score
  • Feb 14, 2024 EPSS Score
  • Mar 16, 2024 EPSS Score
  • Apr 17, 2024 EPSS Score
  • May 18, 2024 EPSS Score
  • Jun 19, 2024 EPSS Score
  • Jul 20, 2024 EPSS Score
Open in Interactive Console →
$ Console Community · 100/wk Open console ›