.. / CVE-2023-46747

• RCE
• PoC
• Nuclei
• Web

Exploit for F5 BIG-IP - Unauthenticated Remote Code Execution (CVE-2023-46747)

Description:

CVE-2023-46747 is a critical severity authentication bypass vulnerability in F5 BIG-IP that could allow an unauthenticated attacker to achieve remote code execution (RCE). The vulnerability impacts the BIG-IP Configuration utility, also known as the TMUI, wherein arbitrary requests can bypass authentication. The vulnerability received a CVSSv3 score of 9.8.

Affected Products:

• F5 BIG-IP 17.1.0
• F5 BIG-IP 16.1.0 to 16.1.4
• F5 BIG-IP 15.1.0 to 15.1.10
• F5 BIG-IP 14.1.0 to 14.1.5
• F5 BIG-IP 13.1.0 to 13.1.5

Nuclei Template

View the template here CVE-2023-46747.yaml

Validate with Nuclei

echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2023/CVE-2023-46747.yaml

References: