Skip to content
fr Sign in
7.4 High

CVE-2023-45226 The BIG-IP SPK TMM (Traffic Management Module) f5-debug-sidecar and f5-debug-sshd containers contains hardcoded…

Description

The BIG-IP SPK TMM (Traffic Management Module) f5-debug-sidecar and f5-debug-sshd containers contains hardcoded credentials that may allow an attacker with the ability to intercept traffic to impersonate the SPK Secure Shell (SSH) server on those containers. This is only exposed when ssh debug is enabled.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated

Affected products and versions

Product Affected versions Fixed in
BIG-IP Next SPK 1.5 1.5.0 → < 1.6.0 1.6.0

References

Timeline

  1. Published
  2. Last modified

Other CVEs of BIG-IP Next SPK

The 23 CVEs of BIG-IP Next SPK →
CVE-2026-59762 When an HTTP/2 profile is configured on a virtual server, undisclosed requests can cause an increase in memory… 7.5 High CVE-2026-42409 When an HTTP/2 profile and an iRule containing the HTTP::redirect or HTTP::respond command are configured on a virtual… 7.5 High CVE-2026-40618 When an SSL profile is configured on a virtual server on BIG-IP Virtual Edition (VE) without Intel QuickAssist… 7.5 High CVE-2026-40629 When SSL profiles are configured on a virtual server, undisclosed traffic can cause the virtual server to stop… 7.5 High
Track this CVE