cve/2023/CVE-2023-46747.md

CVE-2023-46747

Description

Undisclosed requests may bypass configuration utility authentication, allowing an attacker with network access to the BIG-IP system through the management port and/or self IP addresses to execute arbitrary system commands.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated

POC

Reference

• http://packetstormsecurity.com/files/175673/F5-BIG-IP-TMUI-AJP-Smuggling-Remote-Command-Execution.html

Github

• https://github.com/AliBrTab/CVE-2023-46747-POC
• https://github.com/CVEDB/awesome-cve-repo
• https://github.com/CVEDB/top
• https://github.com/GhostTroops/TOP
• https://github.com/MD-SEC/MDPOCS
• https://github.com/Marco-zcl/POC
• https://github.com/Ostorlab/KEV
• https://github.com/Ostorlab/known_exploited_vulnerbilities_detectors
• https://github.com/Threekiii/CVE
• https://github.com/W01fh4cker/CVE-2023-46747-RCE
• https://github.com/bhaveshharmalkar/learn365
• https://github.com/bijaysenihang/CVE-2023-46747-Mass-RCE
• https://github.com/d4n-sec/d4n-sec.github.io
• https://github.com/f1tao/awesome-iot-security-resource
• https://github.com/fu2x2000/CVE-2023-46747
• https://github.com/getdrive/PoC
• https://github.com/hktalent/TOP
• https://github.com/irgoncalves/awesome-security-articles
• https://github.com/maniak-academy/Mitigate-CVE-2023-46747
• https://github.com/nomi-sec/PoC-in-GitHub
• https://github.com/nvansluis/test_cve-2023-46747
• https://github.com/sanjai-AK47/CVE-2023-22518
• https://github.com/sanjai-AK47/CVE-2023-22527
• https://github.com/sanjai-AK47/CVE-2023-46747
• https://github.com/tanjiti/sec_profile
• https://github.com/vidura2/cve-2023-46747
• https://github.com/wy876/POC
• https://github.com/xingchennb/POC-
• https://github.com/y4v4z/CVE-2023-46747-POC