Live › vulnerability › CVE-2023-46747
Go to dashboardF5 BIG-IP's Configuration Utility has an authentication bypass that lets an unauthenticated attacker reach the management interface through alternate request paths. The attacker can then execute system commands on the BIG-IP appliance.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 19:11 UTC, 3h before NVD. All times on this page are UTC.
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| F5 BIG-IP Configuration Utility | vendor | – | – |
| f5 big-ip access policy manager | vendor | >= 13.1.0, <= 13.1.5 | – |
| f5 big-ip access policy manager | vendor | >= 14.1.0, <= 14.1.5 | – |
| f5 big-ip access policy manager | vendor | >= 15.1.0, <= 15.1.10 | – |
| f5 big-ip access policy manager | vendor | >= 16.1.0, <= 16.1.4 | – |
| f5 big-ip access policy manager | vendor | >= 17.1.0, <= 17.1.1 | – |
| f5 big-ip advanced firewall manager | vendor | >= 13.1.0, <= 13.1.5 | – |
| f5 big-ip advanced firewall manager | vendor | >= 14.1.0, <= 14.1.5 | – |
| f5 big-ip advanced firewall manager | vendor | >= 15.1.0, <= 15.1.10 | – |
| f5 big-ip advanced firewall manager | vendor | >= 16.1.0, <= 16.1.4 | – |
| f5 big-ip advanced firewall manager | vendor | >= 17.1.0, <= 17.1.1 | – |
| f5 big-ip advanced web application firewall | vendor | >= 13.1.0, <= 13.1.5 | – |
| f5 big-ip advanced web application firewall | vendor | >= 14.1.0, <= 14.1.5 | – |
| f5 big-ip advanced web application firewall | vendor | >= 15.1.0, <= 15.1.10 | – |
| f5 big-ip advanced web application firewall | vendor | >= 16.1.0, <= 16.1.4 | – |
| f5 big-ip advanced web application firewall | vendor | >= 17.1.0, <= 17.1.1 | – |
| f5 big-ip carrier-grade nat | vendor | >= 13.1.0, <= 13.1.5 | – |
| f5 big-ip carrier-grade nat | vendor | >= 14.1.0, <= 14.1.5 | – |
| f5 big-ip carrier-grade nat | vendor | >= 15.1.0, <= 15.1.10 | – |
| f5 big-ip carrier-grade nat | vendor | >= 16.1.0, <= 16.1.4 | – |
| f5 big-ip carrier-grade nat | vendor | >= 17.1.0, <= 17.1.1 | – |
| f5 big-ip ddos hybrid defender | vendor | >= 13.1.0, <= 13.1.5 | – |
| f5 big-ip ddos hybrid defender | vendor | >= 14.1.0, <= 14.1.5 | – |
| f5 big-ip ddos hybrid defender | vendor | >= 15.1.0, <= 15.1.10 | – |
| f5 big-ip ddos hybrid defender | vendor | >= 16.1.0, <= 16.1.4 | – |
| f5 big-ip ddos hybrid defender | vendor | >= 17.1.0, <= 17.1.1 | – |
| f5 big-ip ssl orchestrator | vendor | >= 13.1.0, <= 13.1.5 | – |
| f5 big-ip ssl orchestrator | vendor | >= 14.1.0, <= 14.1.5 | – |
| f5 big-ip ssl orchestrator | vendor | >= 15.1.0, <= 15.1.10 | – |
| f5 big-ip ssl orchestrator | vendor | >= 16.1.0, <= 16.1.4 | – |
| f5 big-ip ssl orchestrator | vendor | >= 17.1.0, <= 17.1.1 | – |
| f5 big-ip domain name system | vendor | >= 13.1.0, <= 13.1.5 | – |
| f5 big-ip domain name system | vendor | >= 14.1.0, <= 14.1.5 | – |
| f5 big-ip domain name system | vendor | >= 15.1.0, <= 15.1.10 | – |
| f5 big-ip domain name system | vendor | >= 16.1.0, <= 16.1.4 | – |
| f5 big-ip domain name system | vendor | >= 17.1.0, <= 17.1.1 | – |
| f5 big-ip local traffic manager | vendor | >= 13.1.0, <= 13.1.5 | – |
| f5 big-ip local traffic manager | vendor | >= 14.1.0, <= 14.1.5 | – |
| f5 big-ip local traffic manager | vendor | >= 15.1.0, <= 15.1.10 | – |
| f5 big-ip local traffic manager | vendor | >= 16.1.0, <= 16.1.4 | – |
| f5 big-ip local traffic manager | vendor | >= 17.1.0, <= 17.1.1 | – |
Unknown from the sources.
Apply the mitigation or fix from the F5 vendor advisory, or discontinue use of the product if no mitigation is available (per CISA required action).
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
F5 BIG-IP Configuration utility contains an authentication bypass using an alternate path or channel vulnerability due to undisclosed requests that may allow an unauthenticated attacker with network access to the BIG-IP system through the management port and/or self IP addresses to execute system commands. This vulnerability can be used in conjunction with CVE-2023-46748.
CISA required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
This page as .md · .json · in your agent: get_signal("CVE-2023-46747")
CISA KEV catalog, Creative Commons 0 · NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.