Exploit / PoCcritical

F5 fixes critical BIG-IP vulnerability, PoC is public (CVE-2023-46747)

Help Net Securityby @helpnetsecurityNov 2, 2023 · 11:53 UTC (Nov 2, 2023)2 min read5 · 1 read

Read at helpnetsecurity.com

Analyze CVE-2023-46747 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2023-46747 CVE-2020-5902 CVE-2023-46748

Tags: cve-2023-46747 cve-2020-5902 cve-2023-46748 exploit

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2020-5902	Unauthenticated RCE via path traversal in F5 BIG-IP TMUI	9.8	100%	KEVRansomwarePoC ×8	Jul 1, 2020 KEV Nov 3, 2021
CVE-2023-46747 +1 related CVE CVE-2023-46748	F5 BIG-IP TMUI Authentication Bypass Enables Unauthenticated RCE	9.8 group max	97%	KEVRansomwarePoC ×2	Oct 26, 2023 KEV Oct 31, 2023

From the original article

2 min read at helpnetsecurity.com

F5 Networks has released hotfixes for two vulnerabilities affecting its BIG-IP multi-purpose networking devices/modules, including a critical authentication bypass vulnerability (CVE-2023-46747) that could lead to unauthenticated remote code execution (RCE).

Help Net Security

By @helpnetsecurity · helpnetsecurity.com

Read the full article at Help Net Security

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.