The version of F5 Networks BIG-IP installed on the remote host is prior to 13.1.5.1 + Hotfix-BIGIP-13.1.5.1.0.20.2-ENG / 14.1.5.6 +Hotfix-BIGIP-14.1.5.6.0.10.6-ENG / 15.1.10.2 + Hotfix-BIGIP-15.1.10.2.0.44.2-ENG / 16.1.4.1 + Hotfix- BIGIP-16.1.4.1.0.50.5-ENG / 17.1.0.3 + Hotfix-BIGIP-17.1.0.3.0.75.4-ENG / 17.1.1 + Hotfix-BIGIP-17.1.1.0.2.6-ENG. It is, therefore, affected by a vulnerability as referenced in the K000137353 advisory.

  - Undisclosed requests may bypass configuration utility authentication, allowing an attacker with network     access to the BIG-IP system through the management port and/or self IP addresses to execute arbitrary     system commands. Note: Software versions which have reached End of Technical Support (EoTS) are not     evaluated (CVE-2023-46747)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

Detections

Analytics

F5 Networks BIG-IP : BIG-IP Configuration utility unauthenticated remote code execution vulnerability (K000137353)

critical Nessus Plugin ID 184199

Version 1.8