Threat actorcriticalExploited in the wild

Threat actors actively exploit F5 BIG-IP flaws CVE-2023

Security Affairsby @securityaffairsNov 1, 2023 · 17:16 UTC (Nov 1, 2023)2 min read4 · 2 reads

Read at securityaffairs.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2023-46747 CVE-2023-46748

Tags: cve-2023-46747 cve-2023-46748 threat-actor

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2023-46747 +1 related CVE CVE-2023-46748	F5 BIG-IP TMUI Authentication Bypass Enables Unauthenticated RCE	9.8 group max	97%	KEVRansomwarePoC ×2	Oct 26, 2023 KEV Oct 31, 2023

From the original article

2 min read at securityaffairs.com

Experts warn that threat actors started exploiting the critical flaw CVE-2023-46747 in F5 BIG-IP installs less than five days after PoC exploit disclosure. F5 this week warned customers about a critical security vulnerability, tracked as CVE-2023-46747 (CVSS 9. 8), that impacts BIG-IP and could result in unauthenticated remote code execution.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.