Lucene search

China National Vulnerability DatabaseCNVD-2023-75607

HistoryOct 11, 2023 - 12:00 a.m.

F5 BIG-IP Next SPK Hardcoded Credentials Vulnerability

2023-10-1100:00:00

China National Vulnerability Database

www.cnvd.org.cn

f5 big-ip

application delivery platform

hard-coded credentials

vulnerability

intercept traffic

impersonate

ssh server

containers

attack

cnvd

AI Score

6.8

Confidence

High

EPSS

0.001

Percentile

40.9%

JSON

F5 BIG-IP is an application delivery platform from F5 that integrates network traffic orchestration, load balancing, intelligent DNS, and remote access policy management. A hard-coded credential vulnerability exists in F5 BIG-IP Next SPK, which can be exploited by an attacker with the ability to intercept traffic to impersonate an SPK Secure Shell (SSH) server on these containers.