CVE-2023-3470

🗓️ 02 Aug 2023 15:54:14Reported by f5Type

F5 BIG-IP platforms with Cavium Nitrox FIPS HSM cards have a predictable password vulnerabilit

Reporter	Title	Published	Views	Family All 14
Circl	CVE-2023-3470	2 Aug 202320:39	–	circl
CNNVD	F5 BIG-IP 授权问题漏洞	2 Aug 202300:00	–	cnnvd
CNVD	F5 BIG-IP Information Disclosure Vulnerability (CNVD-2023-82304)	7 Aug 202300:00	–	cnvd
Cvelist	CVE-2023-3470 BIG-IP FIPS HSM password vulnerability CVE-2023-3470	2 Aug 202315:54	–	cvelist
EUVD	EUVD-2023-44131	3 Oct 202520:07	–	euvd
F5 Networks	K000135449: BIG-IP FIPS HSM password vulnerability CVE-2023-3470	2 Aug 202313:20	–	f5
F5 Networks	K000135479: Overview of F5 vulnerabilities (August 2023)	2 Aug 202313:26	–	f5
Tenable Nessus	F5 Networks BIG-IP : BIG-IP FIPS HSM password vulnerability (K000135449)	2 Aug 202300:00	–	nessus
NCSC	Vulnerabilities fixed in F5 BIG-IP	3 Aug 202300:00	–	ncsc
NVD	CVE-2023-3470	2 Aug 202316:15	–	nvd

NVD

Node

f5 big-ip_access_policy_managerRange13.1.0–13.1.4

f5 big-ip_access_policy_managerRange14.1.0–14.1.4

f5 big-ip_access_policy_managerMatch15.1.0

f5 big-ip_advanced_firewall_managerRange13.1.0–13.1.4

f5 big-ip_advanced_firewall_managerRange14.1.0–14.1.4

f5 big-ip_advanced_firewall_managerMatch15.1.0

f5 big-ip_advanced_web_application_firewallRange13.1.0–13.1.4

f5 big-ip_advanced_web_application_firewallRange14.1.0–14.1.4

f5 big-ip_advanced_web_application_firewallMatch15.1.0

f5 big-ip_analyticsRange13.1.0–13.1.4

f5 big-ip_analyticsRange14.1.0–14.1.4

f5 big-ip_analyticsMatch15.1.0

f5 big-ip_application_acceleration_managerRange13.1.0–13.1.4

f5 big-ip_application_acceleration_managerRange14.1.0–14.1.4

f5 big-ip_application_acceleration_managerMatch15.1.0

f5 big-ip_application_security_managerRange13.1.0–13.1.4

f5 big-ip_application_security_managerRange14.1.0–14.1.4

f5 big-ip_application_security_managerMatch15.1.0

f5 big-ip_application_visibility_and_reportingRange13.1.0–13.1.4

f5 big-ip_application_visibility_and_reportingRange14.1.0–14.1.4

f5 big-ip_application_visibility_and_reportingMatch15.1.0

f5 big-ip_carrier-grade_natRange13.1.0–13.1.4

f5 big-ip_carrier-grade_natRange14.1.0–14.1.4

f5 big-ip_carrier-grade_natMatch15.1.0

f5 big-ip_ddos_hybrid_defenderRange13.1.0–13.1.4

f5 big-ip_ddos_hybrid_defenderRange14.1.0–14.1.4

f5 big-ip_ddos_hybrid_defenderMatch15.1.0

f5 big-ip_domain_name_systemRange13.1.0–13.1.4

f5 big-ip_domain_name_systemRange14.1.0–14.1.4

f5 big-ip_domain_name_systemMatch15.1.0

f5 big-ip_edge_gatewayRange13.1.0–13.1.4

f5 big-ip_edge_gatewayRange14.1.0–14.1.4

f5 big-ip_edge_gatewayMatch15.1.0

f5 big-ip_fraud_protection_serviceRange13.1.0–13.1.4

f5 big-ip_fraud_protection_serviceRange14.1.0–14.1.4

f5 big-ip_fraud_protection_serviceMatch15.1.0

f5 big-ip_global_traffic_managerRange13.1.0–13.1.4

f5 big-ip_global_traffic_managerRange14.1.0–14.1.4

f5 big-ip_global_traffic_managerMatch15.1.0

f5 big-ip_link_controllerRange13.1.0–13.1.4

f5 big-ip_link_controllerRange14.1.0–14.1.4

f5 big-ip_link_controllerMatch15.1.0

f5 big-ip_local_traffic_managerRange13.1.0–13.1.4

f5 big-ip_local_traffic_managerRange14.1.0–14.1.4

f5 big-ip_local_traffic_managerMatch15.1.0

f5 big-ip_policy_enforcement_managerRange13.1.0–13.1.4

f5 big-ip_policy_enforcement_managerRange14.1.0–14.1.4

f5 big-ip_policy_enforcement_managerMatch15.1.0

f5 big-ip_ssl_orchestratorRange13.1.0–13.1.4

f5 big-ip_ssl_orchestratorRange14.1.0–14.1.4

f5 big-ip_ssl_orchestratorMatch15.1.0

f5 big-ip_webacceleratorRange13.1.0–13.1.4

f5 big-ip_webacceleratorRange14.1.0–14.1.4

f5 big-ip_webacceleratorMatch15.1.0

f5 big-ip_websafeRange13.1.0–13.1.4

f5 big-ip_websafeRange14.1.0–14.1.4

f5 big-ip_websafeMatch15.1.0

Node

f5 big-ip_10350v-f_firmwareMatch-

AND

f5 big-ip_10350v-fMatch-

Node

f5 big-ip_i5820-df_firmwareMatch-

AND

f5 big-ip_i5820-dfMatch-

Node

f5 big-ip_i7820-df_firmwareMatch-

AND

f5 big-ip_i7820-dfMatch-

Node

f5 big-ip_i15820-df_firmwareMatch-

AND

f5 big-ip_i15820-dfMatch-

Node

f5 big-ip_5250v-f_firmwareMatch-

AND

f5 big-ip_5250v-fMatch-

Node

f5 big-ip_7200v-f_firmwareMatch-

AND

f5 big-ip_7200v-fMatch-

Node

f5 big-ip_10200v-f_firmwareMatch-

AND

f5 big-ip_10200v-fMatch-

Node

f5 big-ip_6900-f_firmwareMatch-

AND

f5 big-ip_6900-fMatch-

Node

f5 big-ip_8900-f_firmwareMatch-

AND

f5 big-ip_8900-fMatch-

Node

f5 big-ip_11000-f_firmwareMatch-

AND

f5 big-ip_11000-fMatch-

Node

f5 big-ip_11050-f_firmwareMatch-

AND

f5 big-ip_11050-fMatch-

[
  {
    "defaultStatus": "unknown",
    "modules": [
      "All Modules"
    ],
    "product": "BIG-IP",
    "vendor": "F5",
    "versions": [
      {
        "lessThan": "*",
        "status": "unaffected",
        "version": "16.0.0",
        "versionType": "semver"
      },
      {
        "lessThan": "15.1.1",
        "status": "affected",
        "version": "15.1.0",
        "versionType": "semver"
      },
      {
        "lessThan": "14.1.4",
        "status": "affected",
        "version": "14.1.0",
        "versionType": "semver"
      },
      {
        "lessThan": "13.1.4",
        "status": "affected",
        "version": "13.1.0",
        "versionType": "semver"
      }
    ]
  }
]

Source	Link
my	www.my.f5.com/manage/s/article/K000135449

17 Jun 2026 06:14Current

6.1Medium risk

Vulners AI Score6.1

CVSS 3.16 - 6.1

EPSS0.00168

SSVC

f5 big-ip cavium nitrox fips hsm password vulnerability tmsh access vcmp cve-2023-3470 nvd