728 matches found
Mitigate-CVE-2023-46747
用于缓解 CVE-2023-46747 的 Ansible Playbook K000137353：BIG-IP 配置工具未经身份验证的远程代码执行漏洞 CVE-2023-46747 链接如下 https://my.f5.com/manage/s/article/K000137353 使用方法 1. Git 克隆我的仓库 https://github.com/maniak-academy/Mitigate-CVE-2023-46747.git 2. 根据你的 BIG-IP 信息更新 hosts.ini 3. 执行 playbook ansible-playbook -i hosts.in...
krf
KRF KRF is a K ernelspace R andomized F aulter. It currently supports the Linux and FreeBSD kernels. What? Fault injection is a software testing technique that involves inducing failures "faults" in the functions called by a program. If the callee has failed to perform proper error checking and...
CVE-2022-1388
shodan search 'http.html:"BIG-IP Configuration Utility"' --fields=ipstr,port --separator ":" --limit 10 | grep '' shodan search 'http.title:"BIG-IP®-+Redirect"+"Server"' --fields=ipstr,port --separator ":" --limit 10 | grep '' CVE-2022-1388 CVE-2022-1388 スキャナー 使用方法 $python3 CVE-2022-1388-V1.1.py...
CVE-2026-63020
A vulnerability exists in an undisclosed BIG-IP Configuration utility page that may allow an attacker to spoof error messages Impact: An attacker may trick authenticated BIG-IP users into accessing malicious links and reflect a spoofed error message in the victim's BIG-IP Configuration utility we...
CVE-2026-63020
CVE-2026-63020 is a CWE-451 (UI Misrepresentation of Critical Information) vulnerability in the BIG-IP Configuration utility web interface. An attacker can trick authenticated users into clicking malicious links, causing a spoofed error message to be reflected in the victim's browser session. Thi...
CVE-2026-63020 BIG-IP Configuration utility vulnerability
A vulnerability exists in an undisclosed BIG-IP Configuration utility page that may allow an attacker to spoof error messages Impact: An attacker may trick authenticated BIG-IP users into accessing malicious links and reflect a spoofed error message in the victim's BIG-IP Configuration utility we...
EUVD-2026-70135
A vulnerability exists in an undisclosed BIG-IP Configuration utility page that may allow an attacker to spoof error messages Impact: An attacker may trick authenticated BIG-IP users into accessing malicious links and reflect a spoofed error message in the victim's BIG-IP Configuration utility we...
K000162521: BIG-IP and BIG-IQ Configuration utility vulnerability CVE-2026-66842
Security Advisory Description BIG-IP has a vulnerability where an authenticated user of any role may be able to create administrative user accounts through an undisclosed request to the Configuration utility. CVE-2026-66842 Impact This vulnerability may allow an authenticated attacker with networ...
PT-2026-84759
Name of the Vulnerable Software and Affected Versions BIG-IP affected versions not specified Description An issue in an undisclosed BIG-IP Configuration utility page allows an attacker to spoof error messages. An attacker can trick authenticated users into accessing malicious links, which reflect...
F5 Networks BIG-IP : BIG-IP and BIG-IQ Configuration utility vulnerability (K000162521)
The version of F5 Networks BIG-IP installed on the remote host is prior to 17.1.3.4 / 17.5.1.8 / 21.0.0.3 / 21.1.0.1. It is, therefore, affected by a vulnerability as referenced in the K000162521 advisory. BIG-IP has a vulnerability where an authenticated user of any role may be able to create...
CVE-2026-63020: User Interface (UI) Misrepresentation of Critical Information
A vulnerability exists in an undisclosed BIG-IP Configuration utility page that may allow an attacker to spoof error messages Impact: An attacker may trick authenticated BIG-IP users into accessing malicious links and reflect a spoofed error message in the victim's BIG-IP Configuration utility we...
F5 Networks BIG-IP : BIG-IP Configuration utility vulnerability (K000161728)
The version of F5 Networks BIG-IP installed on the remote host is prior to 17.1.3.4 / 17.5.1.8 / 21.1.0.1. It is, therefore, affected by a vulnerability as referenced in the K000161728 advisory. A vulnerability exists in an undisclosed BIG-IP Configuration utility page that may allow an attacker ...
CVE-2026-73819
The affected Ebyte product's vendor configuration utility permits access to administrative functions without verifying the operator's identity under certain credential conditions. An unauthenticated attacker on the adjacent network could modify critical settings or change access credentials,...
CVE-2026-73819
Ebyte NE2-D11 (and NA111-M ) vendor configuration utility contains a weak authentication flaw: under certain credential conditions, administrative functions are accessible without verifying the operator's identity. An unauthenticated attacker on the adjacent network could modify critical settings...
CVE-2026-73819 Ebyte NA111-M Weak Authentication
The affected Ebyte product's vendor configuration utility permits access to administrative functions without verifying the operator's identity under certain credential conditions. An unauthenticated attacker on the adjacent network could modify critical settings or change access credentials,...
EUVD-2026-68610
The affected Ebyte product's vendor configuration utility permits access to administrative functions without verifying the operator's identity under certain credential conditions. An unauthenticated attacker on the adjacent network could modify critical settings or change access credentials,...
PT-2026-83877
The affected Ebyte product's vendor configuration utility permits access to administrative functions without verifying the operator's identity under certain credential conditions. An unauthenticated attacker on the adjacent network could modify critical settings or change access credentials,...
CVE-2026-73819: Weak Authentication
The affected Ebyte product's vendor configuration utility permits access to administrative functions without verifying the operator's identity under certain credential conditions. An unauthenticated attacker on the adjacent network could modify critical settings or change access credentials,...
CVE-2026-77977 Ebyte NA111-M Missing Authentication for Critical Function
Ebyte gateway product's vendor configuration utility does not require authentication before allowing certain disruptive administrative actions when default credentials remain configured. An unauthenticated attacker on the adjacent network could reboot the device or restore factory settings,...
CVE-2026-77977: Missing Authentication for Critical Function
Ebyte gateway product's vendor configuration utility does not require authentication before allowing certain disruptive administrative actions when default credentials remain configured. An unauthenticated attacker on the adjacent network could reboot the device or restore factory settings,...