Known Exploited Vulnerabilities October 31, 2023 · CISA KEV Catalog

CVE-2023-46747: F5 BIG-IP Configuration Utility Authentication Bypass Vulnerability

Summary: CVE-2023-46747 is an authentication bypass in the F5 BIG-IP Configuration utility, caused by undisclosed requests that let an unauthenticated attacker with network access through the management port and/or self IP addresses execute system commands. The vulnerability can be used in conjunction with CVE-2023-46748, and CISA set a remediation due date of 2023-11-21.

Bottom line: CISA lists this flaw as known ransomware campaign use, and an unauthenticated attacker reaching the management port can run system commands on the BIG-IP system itself.

Read the original at CISA KEV Catalog ↗

Topics

Vulnerabilities & Patching

Mentions

CVE-2023-46747F5

Related

CVE-2026-94127: F5 BIG-IP APM Heap-based Buffer Overflow Vulnerability Known Exploited Vulnerabilities · Sep 22, 2026

CVE-2025-53521: F5 BIG-IP Stack-Based Buffer Overflow Vulnerability Known Exploited Vulnerabilities · Mar 27, 2026

CVE-2023-46748: F5 BIG-IP Configuration Utility SQL Injection Vulnerability Known Exploited Vulnerabilities · Oct 31, 2023