Lucene search
F5F5:K000133472HistoryAug 02, 2023 - 12:00 a.m.
K000133472 : BIG-IP and BIG-IQ iControl SOAP vulnerability CVE-2023-38419
2023-08-0200:00:00
my.f5.com
6
icontrol soap
authenticated attacker
denial-of-service
big-ip
big-iq
0.0004 Low
EPSS
Percentile
13.5%
Security Advisory Description
An authenticated attacker with guest privileges or higher can cause the iControl SOAP process to terminate by sending undisclosed requests. (CVE-2023-38419)
Impact
The iControl SOAP daemon becomes unresponsive. This vulnerability allows an authenticated attacker with at least guest role privileges to send undisclosed requests and cause a denial-of-service (DoS) of the iControl SOAP service. There is no data plane exposure; this is a control plane issue only.
Related
nvd
nvd
CVE-2023-38419
2023-08-02 16:15:10
cnvd
cnvd
F5 BIG-IP and BIG-IQ Centralized Management Denial of Service Vulnerability
2023-08-07 00:00:00
prion
prion
Code injection
2023-08-02 16:15:00
nessus
nessus
cve
cve
CVE-2023-38419
2023-08-02 16:15:10
cvelist
cvelist
CVE-2023-38419 BIG-IP and BIG-IQ iControl SOAP vulnerability
2023-08-02 15:55:27
f5
f5
K000135479 : Overview of F5 vulnerabilities (August 2023)
2023-08-02 00:00:00