KEVIntel
Back to KEVs
9.8
CVSS
Critical

CVE-2023-46747

PUBLISHED

BIG-IP Configuration utility unauthenticated remote code execution vulnerability

Exploited in the wild Used in malware Remote Low complexity No user interaction
Vendor
F5
Product
BIG-IP
Published
Oct 26, 2023
EPSS
—

Description

Undisclosed requests may bypass configuration utility authentication, allowing an attacker with network access to the BIG-IP system through the management port and/or self IP addresses to execute arbitrary system commands.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated

windows cisa malware ransomware nuclei_scanner edge metasploit

CVSS scores

CVSS v3.1 9.8 Critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitation status

Exploited in the wild

Recorded 2023-10-31 00:00:00 UTC · Source

Used in malware

Recorded 2023-10-31 00:00:00 UTC · Source

SSVC decision points

Exploitation
active
Automatable
Yes
Technical impact
total

References

Known exploited vulnerability sources

Catalogues that list this CVE as a known exploited vulnerability.

Source Added
CISA Oct 31, 2023

Scanner integrations

Scanner Reference Detected
Metasploit https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/f5_bigip_tmui_rce_cve_2023_46747.rb Apr 28, 2025
Nuclei https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-46747.yaml Apr 25, 2025

Potential proof of concepts

These PoCs are unverified and could contain malware. Use at your own risk.

f5_bigip_tmui_rce_cve_2023_46747

metasploit · Created Unknown

Metasploit module for CVE-2023-46747

RevoltSecurities/CVE-2023-46747

github · Created 2023-11-03 13:31:11 UTC · 3 stars

An Exploitation script developed to exploit the CVE-2023-46747 which Pre Auth Remote Code Execution of f5-BIG Ip producs

maniak-academy/Mitigate-CVE-2023-46747

github · Created 2023-11-01 14:57:20 UTC · 2 stars

W01fh4cker/CVE-2023-46747-RCE

github · Created 2023-11-01 09:31:05 UTC · 203 stars

exploit for f5-big-ip RCE cve-2023-46747

AliBrTab/CVE-2023-46747-POC

github · Created 2023-10-30 15:50:46 UTC · 9 stars

F5 BIG-IP unauthenticated remote code execution (RCE) and authentication bypass vulnerability!

Timeline

  • CVE ID Reserved

  • CVE Published to Public

  • Exploit Used in Malware

  • Added to KEVIntel

  • Detected by Nuclei

  • Detected by Metasploit