BlogPHP2Shell Exploitation: How Secure.com Can Protect YouRead more
← CVE Radar

CVE-2023-46748BIG-IP Configuration utility authenticated SQL injection vulnerability

An authenticated SQL injection vulnerability exists in the BIG-IP Configuration utility which may allow an authenticated attacker with network access to the Configuration utility through the BIG-IP management port and/or self IP addresses to execute arbitrary system commands.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated

8.8 HIGHEPSS 4.26%⚡ Known Exploited (CISA KEV)NVD: Analyzed

OverviewAffected ProductsReferences
NVD CVE.org

Overview

Severity

ScoreSeverityVersionVector String
8.8HIGH3.1f5 (CNA)CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CISA required action

⚡ Known exploited · remediation due Nov 21, 2023

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Details

CVE ID
CVE-2023-46748
Status
Analyzed
Assigner (CNA)
f5
Published
Oct 26, 2023
Last modified
2026-06-17 06:31 UTC
Weaknesses
  • CWE-89 · Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

Sources

Refreshed hourly from the sources above. Last fetched 2026-11-08 14:02 UTC.