CVE-2023-43746 BIG-IP Appliance mode external monitor vulnerability

🗓️ 10 Oct 2023 12:36:52Reported by f5Type

CVE-2023-43746 BIG-IP Appliance mode external monitor vulnerability allows bypass of restrictions

Reporter	Title	Published	Views	Family All 15
BDU FSTEC	The vulnerabilities of the BIG-IP Access Policy Manager, as well as of other software solutions such as BIG-IP Advanced Firewall Manager, BIG-IP Application Security Manager, BIG-IP Domain Name System, and BIG-IP Local Traffic Manager, are related to insecure privilege management. This allows attackers to compromise the confidentiality and integrity of protected information.	25 Oct 202300:00	–	bdu_fstec
Circl	CVE-2023-43746	10 Oct 202316:16	–	circl
CNNVD	F5 BIG-IP 安全漏洞	10 Oct 202300:00	–	cnnvd
CNVD	F5 BIG-IP Access Control Error Vulnerability (CNVD-2023-75601)	11 Oct 202300:00	–	cnvd
CVE	CVE-2023-43746	10 Oct 202312:36	–	cve
EUVD	EUVD-2023-48125	3 Oct 202520:07	–	euvd
F5 Networks	K000137053: Overview of F5 vulnerabilities (October 2023)	10 Oct 202312:02	–	f5
F5 Networks	K41072952: BIG-IP Appliance mode external monitor vulnerability CVE-2023-43746	10 Oct 202309:52	–	f5
Tenable Nessus	F5 Networks BIG-IP : BIG-IP Appliance Mode External Monitor Vulnerability (K41072952)	13 Oct 202300:00	–	nessus
NCSC	Vulnerabilities fixed in F5 BIG-IP	10 Oct 202300:00	–	ncsc

[
  {
    "defaultStatus": "unknown",
    "modules": [
      "All Modules"
    ],
    "product": "BIG-IP",
    "vendor": "F5",
    "versions": [
      {
        "lessThan": "*",
        "status": "unaffected",
        "version": "17.1.0",
        "versionType": "semver"
      },
      {
        "lessThan": "16.1.4",
        "status": "affected",
        "version": "16.1.0",
        "versionType": "semver"
      },
      {
        "lessThan": "15.1.9",
        "status": "affected",
        "version": "15.1.0",
        "versionType": "semver"
      },
      {
        "lessThan": "*",
        "status": "affected",
        "version": "14.1.0",
        "versionType": "semver"
      },
      {
        "lessThan": "*",
        "status": "affected",
        "version": "13.1.0",
        "versionType": "semver"
      }
    ]
  }
]

Source	Link
my	www.my.f5.com/manage/s/article/K41072952

10 Oct 2023 12:36Current

8.7High risk

Vulners AI Score8.7

CVSS 3.18.7

EPSS0.00435

CWE-267