K000130496: Overview of F5 vulnerabilities (February 2023)

🗓️ 01 Feb 2023 13:56:01Reported by f5Type

f5🔗 my.f5.com👁 57 Views

Overview of F5 vulnerabilities (February 2023) This document provides an overview of F5 vulnerabilities and security exposures affecting F5 device

Reporter	Title	Published	Views	Family All 177
BDU FSTEC	The vulnerability of the BIG-IP Access Policy Manager’s access control and remote authentication mechanisms, as well as the software products such as BIG-IP Advanced Firewall Manager, BIG-IP Analytics, BIG-IP Application Acceleration Manager, BIG-IP Application Security Manager, BIG-IP Hybrid Defender, BIG-IP Domain Name System, BIG-IP Fraud Protection Service, BIG-IP Link Controller, BIG-IP Local Traffic Manager, BIG-IP Policy Enforcement Manager, BIG-IP Orchestrator, allows a perpetrator to trigger a service failure.	21 Feb 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Network Address Translation (NAT) technology implementation in the FastL4 network interface card of the BIG-IP Advanced Firewall Manager virtual server allows a attacker to cause a service failure.	27 Feb 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the BIG-IP Access Policy Manager’s access control and remote authentication mechanism lies in errors during pointer assignment, allowing attackers to trigger an octath in the service.	7 Mar 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the iControl SOAP interface for access control and remote authentication in BIG-IP allows a perpetrator to execute arbitrary code.	1 Dec 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the BIG-IP Access Policy Manager’s access control and remote authentication mechanisms, as well as the software products such as BIG-IP Advanced Firewall Manager, BIG-IP Analytics, BIG-IP Application Acceleration Manager, BIG-IP Application Security Manager, BIG-IP Hybrid Defender, BIG-IP Domain Name System, BIG-IP Fraud Protection Service, BIG-IP Link Controller, BIG-IP Local Traffic Manager, BIG-IP Policy Enforcement Manager, BIG-IP Orchestrator, allows a perpetrator to trigger a service failure.	4 Dec 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the BIG-IP DNS server, related to pointer redirection errors, allows attackers to cause service failures.	6 Dec 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the BIG-IP Access Policy Manager’s access control and remote authentication mechanisms, as well as the software products such as BIG-IP Advanced Firewall Manager, BIG-IP Analytics, BIG-IP Application Acceleration Manager, BIG-IP Application Security Manager, BIG-IP Hybrid Defender, BIG-IP Domain Name System, BIG-IP Fraud Protection Service, BIG-IP Link Controller, BIG-IP Local Traffic Manager, BIG-IP Policy Enforcement Manager, BIG-IP Orchestrator, allows a perpetrator to trigger a service failure.	6 Dec 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the BIG-IP Access Policy Manager’s access control and remote authentication mechanisms, as well as the software products such as BIG-IP Advanced Firewall Manager, BIG-IP Analytics, BIG-IP Application Acceleration Manager, BIG-IP Application Security Manager, BIG-IP Hybrid Defender, BIG-IP Domain Name System, BIG-IP Fraud Protection Service, BIG-IP Link Controller, BIG-IP Local Traffic Manager, BIG-IP Policy Enforcement Manager, BIG-IP Orchestrator, allows a perpetrator to trigger a service failure.	6 Dec 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the HTTP/2 network protocol implementation in BIG-IP’s access control and remote authentication mechanisms allows a attacker to cause service interruptions.	8 Dec 202300:00	–	bdu_fstec
Circl	CVE-2023-22281	1 Feb 202320:14	–	circl

04 Jan 2024 01:48Current

7.3High risk

Vulners AI Score7.3

CVSS 3.18.5

EPSS0.72646

SSVC