Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2023-75607
HistoryOct 11, 2023 - 12:00 a.m.

F5 BIG-IP Next SPK Hardcoded Credentials Vulnerability

2023-10-1100:00:00
China National Vulnerability Database
www.cnvd.org.cn
5
f5 big-ip
application delivery platform
hard-coded credentials
vulnerability
intercept traffic
impersonate
ssh server
containers
attack
cnvd

6.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

39.3%

F5 BIG-IP is an application delivery platform from F5 that integrates network traffic orchestration, load balancing, intelligent DNS, and remote access policy management. A hard-coded credential vulnerability exists in F5 BIG-IP Next SPK, which can be exploited by an attacker with the ability to intercept traffic to impersonate an SPK Secure Shell (SSH) server on these containers.

CPENameOperatorVersion
f5 big-ip next spkeq1.5.0

6.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

39.3%

Related for CNVD-2023-75607