The vulnerability of the BIG-IP Access Policy Manager’s access control and remote authentication mechanisms, as well as the software products such as BIG-IP Advanced Firewall Manager, BIG-IP Analytics, BIG-IP Application Acceleration Manager, BIG-IP Application Security Manager, BIG-IP Hybrid Defender, BIG-IP Domain Name System, BIG-IP Fraud Protection Service, BIG-IP Link Controller, BIG-IP Local Traffic Manager, BIG-IP Policy Enforcement Manager, BIG-IP Orchestrator, allows a perpetrator to trigger a service failure.

🗓️ 06 Dec 2023 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 3 Views

Buffer overflow flaws in F5 Networks access policy manager and related modules enable service failure.

Reporter	Title	Published	Views	Family All 14
Circl	CVE-2023-22422	1 Feb 202320:14	–	circl
CNNVD	F5 BIG-IP 安全漏洞	1 Feb 202300:00	–	cnnvd
CNVD	F5 HTTP profile denial of service vulnerability	1 Feb 202300:00	–	cnvd
CVE	CVE-2023-22422	1 Feb 202317:55	–	cve
Cvelist	CVE-2023-22422 HTTP profile vulnerability	1 Feb 202317:55	–	cvelist
EUVD	EUVD-2023-26585	3 Oct 202520:07	–	euvd
F5 Networks	K000130496: Overview of F5 vulnerabilities (February 2023)	1 Feb 202313:56	–	f5
F5 Networks	K43881487: HTTP profile vulnerability CVE-2023-22422	1 Feb 202313:35	–	f5
Tenable Nessus	F5 Networks BIG-IP : HTTP profile vulnerability (K43881487)	23 Jun 202300:00	–	nessus
NCSC	Vulnerabilities fixed in F5 BIG-IP	2 Feb 202300:00	–	ncsc

Vulners

Node

f5_networks,big-ip_access_policy_managerRange16.1.0–16.1.3.3

OR

f5_networks,big-ip_access_policy_managerRange17.0.0–17.0.0.2

OR

f5_networks,big-ip_advanced_firewall_managerRange16.1.0–16.1.3.3

OR

f5_networks,big-ip_advanced_firewall_managerRange17.0.0–17.0.0.2

OR

f5_networks,big-ip_analyticsRange16.1.0–16.1.3.3

OR

f5_networks,big-ip_analyticsRange17.0.0–17.0.0.2

OR

f5_networks,big-ip_application_acceleration_managerRange16.1.0–16.1.3.3

OR

f5_networks,big-ip_application_acceleration_managerRange17.0.0–17.0.0.2

OR

f5_networks,big-ip_application_security_managerRange16.1.0–16.1.3.3

OR

f5_networks,big-ip_ddos_hybrid_defenderRange16.1.0–16.1.3.3

OR

f5_networks,big-ip_domain_name_systemRange16.1.0–16.1.3.3

OR

f5_networks,big-ip_domain_name_systemRange17.0.0–17.0.0.2

OR

f5_networks,big-ip_fraud_protection_serviceRange17.0.0–17.0.0.2

OR

f5_networks,big-ip_link_controllerRange16.1.0–16.1.3.3

OR

f5_networks,big-ip_link_controllerRange17.0.0–17.0.0.2

OR

f5_networks,big-ip_local_traffic_managerRange16.1.0–16.1.3.3

OR

f5_networks,big-ip_local_traffic_managerRange17.0.0–17.0.0.2

OR

f5_networks,big-ip_policy_enforcement_managerRange16.1.0–16.1.3.3

OR

f5_networks,big-ip_policy_enforcement_managerRange17.0.0–17.0.0.2

OR

f5_networks,big-ip_ssl_orchestratorRange16.1.0–16.1.3.3

OR

f5_networks,big-ip_ssl_orchestratorRange17.0.0–17.0.0.2

OR

f5_networks,big-ip_application_security_managerRange17.0.0–17.0.0.2

OR

f5_networks,big-ip_ddos_hybrid_defenderRange17.0.0–17.0.0.2

Source	Link
my	www.my.f5.com/manage/s/article/K43881487
vuldb	www.vuldb.com/
web	www.web.nvd.nist.gov/view/vuln/detail

06 Dec 2023 00:00Current

7.5High risk

Vulners AI Score7.5

CVSS 37.5

CVSS 27.8

EPSS0.00626

access policy manager firewall manager analytics application acceleration manager application security manager hybrid defender domain name system fraud protection service link controller local traffic manager policy enforcement manager orchestrator