CVE-2023-46747Used in ransomware
F5 BIG-IP Configuration Utility
F5 BIG-IP Configuration Utility Authentication Bypass Vulnerability
What it is
F5 BIG-IP Configuration utility contains an authentication bypass using an alternate path or channel vulnerability due to undisclosed requests that may allow an unauthenticated attacker with network access to the BIG-IP system through the management port and/or self IP addresses to execute system commands. This vulnerability can be used in conjunction with CVE-2023-46748.
What to do
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Vendor notices and references
Description and required action as published by CISA. Full record at NVD.
Other F5 entries on the list
- BIG-IP APM F5 BIG-IP APM Heap-based Buffer Overflow Vulnerability CVE-2026-94127 · Sep 22, 2026
- BIG-IP F5 BIG-IP Stack-Based Buffer Overflow Vulnerability CVE-2025-53521 · Mar 27, 2026
- BIG-IP Configuration Utility F5 BIG-IP Configuration Utility SQL Injection Vulnerability CVE-2023-46748 · Oct 31, 2023
- BIG-IP F5 BIG-IP Missing Authentication Vulnerability CVE-2022-1388 · May 10, 2022
- BIG-IP Traffic Management Microkernel F5 BIG-IP Traffic Management Microkernel Buffer Overflow CVE-2021-22991 · Jan 18, 2022
- BIG-IP and BIG-IQ Centralized Management F5 BIG-IP and BIG-IQ Centralized Management iControl REST Remote Code Execution Vulnerability CVE-2021-22986 · Nov 3, 2021