CVE-2023-41373 BIG-IP Configuration Utility vulnerability

🗓️ 10 Oct 2023 12:33:42Reported by f5Type

BIG-IP Configuration Utility directory traversal vulnerability

Reporter	Title	Published	Views	Family All 15
BDU FSTEC	The vulnerability of the configuration utilities for BIG-IP software products, such as BIG-IP Access Policy Manager, as well as BIG-IP Advanced Firewall Manager, BIG-IP Analytics, BIG-IP Application Acceleration Manager, BIG-IP Application Security Manager, BIG-IP Hybrid Defender, BIG-IP Domain Name System, BIG-IP Fraud Protection Service, BIG-IP Link Controller, BIG-IP Local Traffic Manager, BIG-IP Policy Enforcement Manager, and BIG-IP Orchestrator, allows a perpetrator to escape from an isolated software environment or execute arbitrary code.	13 Oct 202300:00	–	bdu_fstec
Circl	CVE-2023-41373	10 Oct 202316:17	–	circl
CNNVD	F5 BIG-IP 路径遍历漏洞	10 Oct 202300:00	–	cnnvd
CNVD	F5 BIG-IP Configuration Utility Directory Traversal Vulnerability	11 Oct 202300:00	–	cnvd
CVE	CVE-2023-41373	10 Oct 202312:33	–	cve
EUVD	EUVD-2023-45875	3 Oct 202520:07	–	euvd
F5 Networks	K000135689: BIG-IP Configuration utility vulnerability CVE-2023-41373	10 Oct 202310:16	–	f5
F5 Networks	K000137053: Overview of F5 vulnerabilities (October 2023)	10 Oct 202312:02	–	f5
Tenable Nessus	F5 Networks BIG-IP : BIG-IP Configuration utility RCE (K000135689)	13 Oct 202300:00	–	nessus
NCSC	Vulnerabilities fixed in F5 BIG-IP	10 Oct 202300:00	–	ncsc

[
  {
    "defaultStatus": "unknown",
    "modules": [
      "All Modules"
    ],
    "product": "BIG-IP",
    "vendor": "F5",
    "versions": [
      {
        "lessThan": "17.1.0.3",
        "status": "affected",
        "version": "17.1.0",
        "versionType": "semver"
      },
      {
        "lessThan": "16.1.4.1",
        "status": "affected",
        "version": "16.1.0",
        "versionType": "semver"
      },
      {
        "lessThan": "15.1.10.2",
        "status": "affected",
        "version": "15.1.0",
        "versionType": "semver"
      },
      {
        "lessThan": "14.1.5.6",
        "status": "affected",
        "version": "14.1.0",
        "versionType": "semver"
      },
      {
        "lessThan": "*",
        "status": "affected",
        "version": "13.1.0",
        "versionType": "semver"
      }
    ]
  }
]

Source	Link
my	www.my.f5.com/manage/s/article/K000135689

10 Oct 2023 12:33Current

9.6High risk

Vulners AI Score9.6

CVSS 3.19.9

EPSS0.02644

CWE-22