CVE coverage
View on NVD →
CVE-2023-46747
CVSS 9.8
Actively exploited (KEV)
3 detections found
Undisclosed requests may bypass configuration utility authentication, allowing an attacker with network access to the BIG-IP system through the management port and/or self IP addresses to execute arbitrary system commands. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated
Detection rules
| Source | Rule | Status | Updated |
|---|---|---|---|
| splunk | F5 TMUI Authentication Bypass | production | 2026-05-13 |
| sigma | CVE-2023-46747 Exploitation Activity - Proxy | test | 2023-11-08 |
| sigma | CVE-2023-46747 Exploitation Activity - Webserver | test | 2023-11-08 |