CVE-2024-45844CWE-306

BIG-IP monitors vulnerability

High · published October 16, 2024

CVSS v4.0

8.6

EPSS

11%

Percentile

95.8

In the wild

Unconfirmed

What it is

BIG-IP monitor functionality may allow an attacker to bypass access control restrictions, regardless of the port lockdown settings. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

The record

Technical detail

CVSS v4.0: 8.6 · HIGH
Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS: 0.10644 · 95.8th percentile
Weakness: CWE-306 · Missing Authentication for Critical Function
Published: 2024-10-16T14:12Z

EPSS history

Timeline

16 OCT 14:12Z
BIG-IP monitors vulnerability
cvelistv5