CVE-2023-46748

Name of the Vulnerable Software and Affected Versions F5 BIG-IP Configuration utility (affected versions not specified)

Description An authenticated SQL injection vulnerability exists in the BIG-IP Configuration utility, which may allow an authenticated attacker with network access to the Configuration utility through the BIG-IP management port and/or self IP addresses to execute arbitrary system commands. The vulnerability is being actively exploited by threat actors.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.