CVE-2023-46748

An authenticated SQL injection vulnerability exists in the BIG-IP Configuration utility which

may allow an authenticated attacker with network access to the Configuration utility through the BIG-IP management port and/or self IP addresses to execute arbitrary system commands.

Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated

Recent assessments:

cbeek-r7 at November 01, 2023 6:54am UTC reported:

CISA KEV listed

Assessed Attacker Value: 3
Assessed Attacker Value: 3Assessed Attacker Value: 3