Skip to content
8.7 High

CVE-2023-43746 When running in Appliance mode, an authenticated user assigned the Administrator role may be able to bypass Appliance…

Description

When running in Appliance mode, an authenticated user assigned the Administrator role may be able to bypass Appliance mode restrictions, utilizing BIG-IP external monitor on a BIG-IP system.  A successful exploit can allow the attacker to cross a security boundary.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

Affected products and versions

Product Affected versions Fixed in
BIG-IP 17.1 earliest → < 17.1.0 17.1.0
BIG-IP 16.1 16.1.0 → < 16.1.4 16.1.4
BIG-IP 15.1 15.1.0 → < 15.1.9 15.1.9
BIG-IP 14.1 14.1.0 → latest No fix stated
BIG-IP 13.1 13.1.0 → latest No fix stated
The 259 CVEs of BIG-IP →
Track this CVE