VDB
CVE-2023-45226
CVE-2023-45226
PUBLISHED
CVSS 7.400000095367432 HIGH
The BIG-IP SPK TMM (Traffic Management Module) f5-debug-sidecar and f5-debug-sshd containers contains hardcoded credentials that may allow an attacker with the ability to intercept traffic to impersonate the SPK Secure Shell (SSH) server on those containers. This is only exposed when ssh debug is enabled. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated
EPSS 0.46% · 38.5th percentile
Risk Scores
CVSS 3.1
7.400000095367432
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
EPSS Score
0.46%
38.5th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| f5 | big-ip_next_service_proxy_for_kubernetes | 1.5.0 |
| F5 | BIG-IP Next SPK | 1.5.0 |
Timeline
- Oct 10, 2023 CVE Published
- Oct 10, 2023 PoC Published
- Oct 11, 2023 EPSS Score
- Nov 12, 2023 EPSS Score
- Dec 14, 2023 EPSS Score
- Jan 16, 2024 EPSS Score
- Feb 17, 2024 EPSS Score
- Mar 20, 2024 EPSS Score
- Apr 21, 2024 EPSS Score
- May 23, 2024 EPSS Score
- Jun 25, 2024 EPSS Score
- Jul 27, 2024 EPSS Score