The vulnerability of the BIG-IP Access Policy Manager’s access control and remote authentication mechanisms, as well as the software products such as BIG-IP Advanced Firewall Manager, BIG-IP Analytics, BIG-IP Application Acceleration Manager, BIG-IP Application Security Manager, BIG-IP Hybrid Defender, BIG-IP Domain Name System, BIG-IP Fraud Protection Service, BIG-IP Link Controller, BIG-IP Local Traffic Manager, BIG-IP Policy Enforcement Manager, BIG-IP Orchestrator, allows a perpetrator to trigger a service failure.

🗓️ 21 Feb 2023 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 18 Views

Vulnerabilities in BIG-IP products allow remote attackers to trigger service failure via data processing components.

Reporter	Title	Published	Views	Family All 15
Circl	CVE-2023-22340	1 Feb 202320:14	–	circl
CNNVD	F5 BIG-IP 代码问题漏洞	1 Feb 202300:00	–	cnnvd
CNVD	F5 BIG-IP SIP profile denial of service vulnerability (CNVD-2023-05958)	1 Feb 202300:00	–	cnvd
CVE	CVE-2023-22340	1 Feb 202317:54	–	cve
Cvelist	CVE-2023-22340 BIG-IP SIP profile vulnerability	1 Feb 202317:54	–	cvelist
EUVD	EUVD-2023-26503	3 Oct 202520:07	–	euvd
F5 Networks	K000130496: Overview of F5 vulnerabilities (February 2023)	1 Feb 202313:56	–	f5
F5 Networks	K34525368: BIG-IP SIP profile vulnerability CVE-2023-22340	1 Feb 202313:20	–	f5
Tenable Nessus	F5 Networks BIG-IP : BIG-IP SIP profile vulnerability (K34525368)	23 Jun 202300:00	–	nessus
NCSC	Vulnerabilities fixed in F5 BIG-IP	2 Feb 202300:00	–	ncsc

Vulners

Node

OR

f5_networks,big-ip_advanced_firewall_managerRange13.1.0–13.1.5

f5_networks,big-ip_application_security_managerRange13.1.0–13.1.5

f5_networks,big-ip_link_controllerRange13.1.0–13.1.5

f5_networks,big-ip_local_traffic_managerRange13.1.0–13.1.5

f5_networks,big-ip_policy_enforcement_managerRange13.1.0–13.1.5

f5_networks,big-ip_fraud_protection_serviceRange13.1.0–13.1.5

f5_networks,big-ip_ddos_hybrid_defenderRange13.1.0–13.1.5

f5_networks,big-ip_ssl_orchestratorRange13.1.0–13.1.5

f5_networks,big-ip_access_policy_managerRange13.1.0–13.1.5

f5_networks,big-ip_analyticsRange13.1.0–13.1.5

f5_networks,big-ip_application_acceleration_managerRange13.1.0–13.1.5

f5_networks,big-ip_access_policy_managerRange14.1.0–14.1.5.3

f5_networks,big-ip_access_policy_managerRange15.1.0–15.1.8

f5_networks,big-ip_access_policy_managerRange16.1.0–16.1.3.3

f5_networks,big-ip_access_policy_managerRange17.0.0–17.0.0.2

f5_networks,big-ip_advanced_firewall_managerRange14.1.0–14.1.5.3

f5_networks,big-ip_advanced_firewall_managerRange15.1.0–15.1.8

f5_networks,big-ip_advanced_firewall_managerRange16.1.0–16.1.3.3

f5_networks,big-ip_advanced_firewall_managerRange17.0.0–17.0.0.2

f5_networks,big-ip_analyticsRange14.1.0–14.1.5.3

f5_networks,big-ip_analyticsRange15.1.0–15.1.8

f5_networks,big-ip_analyticsRange16.1.0–16.1.3.3

f5_networks,big-ip_analyticsRange17.0.0–17.0.0.2

f5_networks,big-ip_application_acceleration_managerRange15.1.0–15.1.8

f5_networks,big-ip_application_acceleration_managerRange16.1.0–16.1.3.3

f5_networks,big-ip_application_acceleration_managerRange17.0.0–17.0.0.2

f5_networks,big-ip_application_security_managerRange15.1.0–15.1.8

f5_networks,big-ip_application_security_managerRange16.1.0–16.1.3.3

f5_networks,big-ip_ddos_hybrid_defenderRange14.1.0–14.1.5.3

f5_networks,big-ip_ddos_hybrid_defenderRange15.1.0–15.1.8

f5_networks,big-ip_ddos_hybrid_defenderRange16.1.0–16.1.3.3

f5_networks,big-ip_domain_name_systemRange14.1.0–14.1.5.3

f5_networks,big-ip_domain_name_systemRange15.1.0–15.1.8

f5_networks,big-ip_domain_name_systemRange16.1.0–16.1.3.3

f5_networks,big-ip_domain_name_systemRange17.0.0–17.0.0.2

f5_networks,big-ip_fraud_protection_serviceRange15.1.0–15.1.8

f5_networks,big-ip_fraud_protection_serviceRange17.0.0–17.0.0.2

f5_networks,big-ip_link_controllerRange15.1.0–15.1.8

f5_networks,big-ip_link_controllerRange16.1.0–16.1.3.3

f5_networks,big-ip_link_controllerRange17.0.0–17.0.0.2

f5_networks,big-ip_local_traffic_managerRange14.1.0–14.1.5.3

f5_networks,big-ip_local_traffic_managerRange15.1.0–15.1.8

f5_networks,big-ip_local_traffic_managerRange16.1.0–16.1.3.3

f5_networks,big-ip_local_traffic_managerRange17.0.0–17.0.0.2

f5_networks,big-ip_policy_enforcement_managerRange14.1.0–14.1.5.3

f5_networks,big-ip_policy_enforcement_managerRange15.1.0–15.1.8

f5_networks,big-ip_policy_enforcement_managerRange16.1.0–16.1.3.3

f5_networks,big-ip_policy_enforcement_managerRange17.0.0–17.0.0.2

f5_networks,big-ip_ssl_orchestratorRange14.1.0–14.1.5.3

f5_networks,big-ip_ssl_orchestratorRange15.1.0–15.1.8

f5_networks,big-ip_ssl_orchestratorRange16.1.0–16.1.3.3

f5_networks,big-ip_ssl_orchestratorRange17.0.0–17.0.0.2

f5_networks,big-ip_application_security_managerRange14.1.0–14.1.5.3

f5_networks,big-ip_link_controllerRange14.1.0–14.1.5.3

Source	Link
my	www.my.f5.com/manage/s/article/K34525368
nvd	www.nvd.nist.gov/vuln/detail/CVE-2023-22340
web	www.web.nvd.nist.gov/view/vuln/detail

21 Feb 2023 00:00Current

7.2High risk

Vulners AI Score7.2

CVSS 26.8

CVSS 37.5

EPSS0.00626

remote attackers service interruption data processing components access policy manager advanced firewall manager analytics application security manager hybrid defender domain name system fraud protection service link controller local traffic manager policy enforcement manager orchestrator