CVE-2023-43746: BIG-IP Appliance mode external monitor vulnerability
When running in Appliance mode, an authenticated user assigned the Administrator role may be able to bypass Appliance mode restrictions utilizing BIG-IP external monitor on a BIG-IP system. A successful exploit can allow the attacker to cross a security boundary.
Other sources
When running in Appliance mode, an authenticated user assigned the Administrator role may be able to bypass Appliance mode restrictions, utilizing BIG-IP external monitor on a BIG-IP system. A successful exploit can allow the attacker to cross a security boundary. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
— MITRE
Affected Software
Event History
Frequently Asked Questions
What is CVE-2023-43746?
CVE-2023-43746 is a vulnerability that allows an authenticated user with the Administrator role in Appliance mode to bypass restrictions on a BIG-IP system, potentially crossing a security boundary.
Which software versions are affected by CVE-2023-43746?
CVE-2023-43746 affects F5 Big-ip Access Policy Manager versions 13.1.0 to 14.1.5, F5 Big-ip Advanced Firewall Manager versions 13.1.0 to 14.1.5, F5 BIG-IP Application Security Manager versions 13.1.0 to 14.1.5, F5 Big-ip Domain Name System versions 13.1.0 to 14.1.5, and F5 Big-ip Local Traffic Manager versions 13.1.0 to 14.1.5.
What is the severity of CVE-2023-43746?
CVE-2023-43746 has a severity value of 8.7, which is considered high.
How can I fix CVE-2023-43746?
To fix CVE-2023-43746, update to a version of F5 software that is not affected by this vulnerability.
Where can I find more information about CVE-2023-43746?
You can find more information about CVE-2023-43746 at the following link: [https://my.f5.com/manage/s/article/K41072952](https://my.f5.com/manage/s/article/K41072952)