CVE-2023-43746CWE-267

BIG-IP Appliance mode external monitor vulnerability

High · published October 10, 2023

CVSS v3.1
8.7
EPSS
1%
Percentile
44.2
In the wild
Unconfirmed
What it is

When running in Appliance mode, an authenticated user assigned the Administrator role may be able to bypass Appliance mode restrictions, utilizing BIG-IP external monitor on a BIG-IP system.  A successful exploit can allow the attacker to cross a security boundary.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

The record
Technical detail
CVSS v3.1
8.7 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00533 · 44.2th percentile
Weakness
CWE-267 · Privilege Defined With Unsafe Actions
Published
2023-10-10T12:36Z
EPSS history
Timeline
  • 10 OCT 12:36Z
    BIG-IP Appliance mode external monitor vulnerability
    cvelistv5