Vulnerabilitycritical

F5 urges to address a critical flaw in BIG

Security Affairsby @securityaffairsOct 27, 2023 · 09:45 UTC (Oct 27, 2023)2 min read

Read at securityaffairs.com

Analyze CVE-2023-46747 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2023-46747 CVE-2022-26377

Tags: cve-2023-46747 cve-2022-26377 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2022-26377	Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') vulnerability in mod_proxy_ajp of Apache HTTP Server allows an attacker to smuggle…	7.5	21%		Jun 9, 2022
CVE-2023-46747	F5 BIG-IP TMUI Authentication Bypass Enables Unauthenticated RCE	9.8	97%	KEVRansomwarePoC ×2	Oct 26, 2023 KEV Oct 31, 2023

From the original article

2 min read at securityaffairs.com

F5 warns customers of a critical vulnerability impacting BIG-IP that could lead to unauthenticated remote code execution. F5 is warning customers about a critical security vulnerability, tracked as CVE-2023-46747 (CVSS 9. 8), that impacts BIG-IP and could result in unauthenticated remote code execution.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.