Vulnerabilitycritical

F5 Issues Warning: BIG-IP Vulnerability Allows Remote Code Execution

The Hacker Newsby @TheHackersNewsOct 27, 2023 · 04:23 UTC (Oct 27, 2023)2 min read2 · 1 read

Read at thehackernews.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2023-46747 CVE-2022-26377 CVE-2020-5902 CVE-2022-1388

Tags: cve-2023-46747 cve-2022-26377 cve-2020-5902 cve-2022-1388 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2020-5902	Unauthenticated RCE via path traversal in F5 BIG-IP TMUI	9.8	100%	KEVRansomwarePoC ×8	Jul 1, 2020 KEV Nov 3, 2021
CVE-2022-1388	Unauthenticated RCE in F5 BIG-IP via Missing Authentication	9.8	100%	KEVRansomwarePoC ×4	May 5, 2022 KEV May 10, 2022
CVE-2022-26377	Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') vulnerability in mod_proxy_ajp of Apache HTTP Server allows an attacker to smuggle…	7.5	21%		Jun 9, 2022
CVE-2023-46747	F5 BIG-IP TMUI Authentication Bypass Enables Unauthenticated RCE	9.8	97%	KEVRansomwarePoC ×2	Oct 26, 2023 KEV Oct 31, 2023

From the original article

2 min read at thehackernews.com

 Ravie Lakshmanan  Oct 27, 2023 Network Security / Vulnerability F5 has alerted customers of a critical security vulnerability impacting BIG-IP that could result in unauthenticated remote code execution. The issue, rooted in the configuration utility component, has been assigned the CVE identifier CVE-2023-46747 , and carries a CVSS score of 9. 8 out of a maximum of 10.

The Hacker News

By @TheHackersNews · thehackernews.com

Read the full article at The Hacker News

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.