CVE-2023-46748
🔥 Known Exploited (CISA KEV)HIGH
8.8
CVSS Severity Score
Vulnerability Description
An authenticated SQL injection vulnerability exists in the BIG-IP Configuration utility which may allow an authenticated attacker with network access to the Configuration utility through the BIG-IP management port and/or self IP addresses to execute arbitrary system commands. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated
Affected Platforms (CPE)
📦
F5
Big Ip Access Policy Manager
>= 13.1.0 and <= 13.1.5>= 14.1.0 and <= 14.1.5>= 15.1.0 and <= 15.1.10>= 16.1.0 and <= 16.1.4>= 17.1.0 and <= 17.1.1
📦
F5
Big Ip Advanced Firewall Manager
>= 13.1.0 and <= 13.1.5>= 14.1.0 and <= 14.1.5>= 15.1.0 and <= 15.1.10>= 16.1.0 and <= 16.1.4>= 17.1.0 and <= 17.1.1
📦
F5
Big Ip Carrier Grade Nat
>= 13.1.0 and <= 13.1.5>= 14.1.0 and <= 14.1.5>= 15.1.0 and <= 15.1.10>= 16.1.0 and <= 16.1.4>= 17.1.0 and <= 17.1.1
📦
F5
Big Ip Ddos Hybrid Defender
>= 13.1.0 and <= 13.1.5>= 14.1.0 and <= 14.1.5>= 15.1.0 and <= 15.1.10>= 16.1.0 and <= 16.1.4>= 17.1.0 and <= 17.1.1