Back

CRITICAL

BIG-IP Configuration Utility vulnerability

Published Oct 10, 2023

Description

A directory traversal vulnerability exists in the BIG-IP Configuration Utility that may allow an authenticated attacker to execute commands on the BIG-IP system. For BIG-IP system running in Appliance mode, a successful exploit can allow the attacker to cross a security boundary. 

Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

Affected products

Remediation

No remediation recorded yet.

Metrics

Weaknesses (1)

References (1)

Change history (189)
  1. MITRE
    • CVSS severity changed from HIGH to CRITICAL
    • CVSS vector changed from CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H to CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
    • CVSS score changed from 8.8 to 9.9
    • CVSS severity changed from CRITICAL to HIGH
    • CVSS vector changed from CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H to CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
    • CVSS score changed from 9.9 to 8.8
  2. MITRE
    • CVSS severity changed from HIGH to CRITICAL
    • CVSS vector changed from CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H to CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
    • CVSS score changed from 8.8 to 9.9
    • CVSS severity changed from CRITICAL to HIGH
    • CVSS vector changed from CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H to CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
    • CVSS score changed from 9.9 to 8.8
  3. MITRE
    • CVSS severity changed from HIGH to CRITICAL
    • CVSS vector changed from CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H to CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
    • CVSS score changed from 8.8 to 9.9
    • CVSS severity changed from CRITICAL to HIGH
    • CVSS vector changed from CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H to CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
    • CVSS score changed from 9.9 to 8.8
  4. MITRE
    • CVSS severity changed from HIGH to CRITICAL
    • CVSS vector changed from CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H to CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
    • CVSS score changed from 8.8 to 9.9
    • CVSS severity changed from CRITICAL to HIGH
    • CVSS vector changed from CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H to CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
    • CVSS score changed from 9.9 to 8.8
  5. MITRE
    • CVSS severity changed from HIGH to CRITICAL
    • CVSS vector changed from CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H to CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
    • CVSS score changed from 8.8 to 9.9
    • CVSS severity changed from CRITICAL to HIGH
    • CVSS vector changed from CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H to CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
    • CVSS score changed from 9.9 to 8.8
  6. MITRE
    • CVSS severity changed from HIGH to CRITICAL
    • CVSS vector changed from CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H to CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
    • CVSS score changed from 8.8 to 9.9
    • CVSS severity changed from CRITICAL to HIGH
    • CVSS vector changed from CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H to CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
    • CVSS score changed from 9.9 to 8.8
  7. MITRE
    • CVSS severity changed from HIGH to CRITICAL
    • CVSS vector changed from CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H to CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
    • CVSS score changed from 8.8 to 9.9
    • CVSS severity changed from CRITICAL to HIGH
    • CVSS vector changed from CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H to CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
    • CVSS score changed from 9.9 to 8.8
  8. MITRE
    • CVSS severity changed from HIGH to CRITICAL
    • CVSS vector changed from CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H to CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
    • CVSS score changed from 8.8 to 9.9
    • CVSS severity changed from CRITICAL to HIGH
    • CVSS vector changed from CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H to CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
    • CVSS score changed from 9.9 to 8.8
  9. MITRE
    • CVSS severity changed from HIGH to CRITICAL
    • CVSS vector changed from CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H to CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
    • CVSS score changed from 8.8 to 9.9
    • CVSS severity changed from CRITICAL to HIGH
    • CVSS vector changed from CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H to CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
    • CVSS score changed from 9.9 to 8.8
  10. MITRE
    • CVSS severity changed from HIGH to CRITICAL
    • CVSS vector changed from CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H to CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
    • CVSS score changed from 8.8 to 9.9
    • CVSS severity changed from CRITICAL to HIGH
    • CVSS vector changed from CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H to CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
    • CVSS score changed from 9.9 to 8.8
  11. MITRE
    • CVSS severity changed from HIGH to CRITICAL
    • CVSS vector changed from CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H to CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
    • CVSS score changed from 8.8 to 9.9
    • CVSS severity changed from CRITICAL to HIGH
    • CVSS vector changed from CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H to CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
    • CVSS score changed from 9.9 to 8.8
  12. MITRE
    • CVSS severity changed from HIGH to CRITICAL
    • CVSS vector changed from CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H to CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
    • CVSS score changed from 8.8 to 9.9
    • CVSS severity changed from CRITICAL to HIGH
    • CVSS vector changed from CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H to CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
    • CVSS score changed from 9.9 to 8.8
  13. MITRE
    • CVSS severity changed from HIGH to CRITICAL
    • CVSS vector changed from CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H to CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
    • CVSS score changed from 8.8 to 9.9
    • CVSS severity changed from CRITICAL to HIGH
    • CVSS vector changed from CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H to CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
    • CVSS score changed from 9.9 to 8.8
  14. MITRE
    • CVSS severity changed from HIGH to CRITICAL
    • CVSS vector changed from CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H to CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
    • CVSS score changed from 8.8 to 9.9
    • CVSS severity changed from CRITICAL to HIGH
    • CVSS vector changed from CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H to CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
    • CVSS score changed from 9.9 to 8.8
  15. MITRE
    • CVSS severity changed from HIGH to CRITICAL
    • CVSS vector changed from CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H to CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
    • CVSS score changed from 8.8 to 9.9
    • CVSS severity changed from CRITICAL to HIGH
    • CVSS vector changed from CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H to CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
    • CVSS score changed from 9.9 to 8.8
  16. MITRE
    • CVSS severity changed from HIGH to CRITICAL
    • CVSS vector changed from CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H to CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
    • CVSS score changed from 8.8 to 9.9
    • CVSS severity changed from CRITICAL to HIGH
    • CVSS vector changed from CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H to CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
    • CVSS score changed from 9.9 to 8.8
  17. MITRE
    • CVSS severity changed from HIGH to CRITICAL
    • CVSS vector changed from CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H to CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
    • CVSS score changed from 8.8 to 9.9
    • CVSS severity changed from CRITICAL to HIGH
    • CVSS vector changed from CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H to CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
    • CVSS score changed from 9.9 to 8.8
  18. MITRE
    • CVSS severity changed from HIGH to CRITICAL
    • CVSS vector changed from CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H to CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
    • CVSS score changed from 8.8 to 9.9
    • CVSS severity changed from CRITICAL to HIGH
    • CVSS vector changed from CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H to CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
    • CVSS score changed from 9.9 to 8.8
  19. MITRE
    • CVSS severity changed from HIGH to CRITICAL
    • CVSS vector changed from CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H to CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
    • CVSS score changed from 8.8 to 9.9
    • CVSS severity changed from CRITICAL to HIGH
    • CVSS vector changed from CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H to CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
    • CVSS score changed from 9.9 to 8.8
  20. MITRE
    • CVSS severity changed from HIGH to CRITICAL
    • CVSS vector changed from CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H to CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
    • CVSS score changed from 8.8 to 9.9
    • CVSS severity changed from CRITICAL to HIGH
    • CVSS vector changed from CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H to CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
    • CVSS score changed from 9.9 to 8.8
  21. MITRE
    • CVSS severity changed from HIGH to CRITICAL
    • CVSS vector changed from CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H to CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
    • CVSS score changed from 8.8 to 9.9
    • CVSS severity changed from CRITICAL to HIGH
    • CVSS vector changed from CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H to CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
    • CVSS score changed from 9.9 to 8.8
  22. MITRE
    • CVSS severity changed from HIGH to CRITICAL
    • CVSS vector changed from CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H to CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
    • CVSS score changed from 8.8 to 9.9
    • CVSS severity changed from CRITICAL to HIGH
    • CVSS vector changed from CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H to CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
    • CVSS score changed from 9.9 to 8.8
  23. MITRE
    • CVSS severity changed from HIGH to CRITICAL
    • CVSS vector changed from CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H to CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
    • CVSS score changed from 8.8 to 9.9
    • CVSS severity changed from CRITICAL to HIGH
    • CVSS vector changed from CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H to CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
    • CVSS score changed from 9.9 to 8.8
  24. MITRE
    • CVSS severity changed from HIGH to CRITICAL
    • CVSS vector changed from CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H to CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
    • CVSS score changed from 8.8 to 9.9
    • CVSS severity changed from CRITICAL to HIGH
    • CVSS vector changed from CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H to CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
    • CVSS score changed from 9.9 to 8.8
  25. MITRE
    • CVSS severity changed from HIGH to CRITICAL
    • CVSS vector changed from CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H to CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
    • CVSS score changed from 8.8 to 9.9
    • CVSS severity changed from CRITICAL to HIGH
    • CVSS vector changed from CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H to CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
    • CVSS score changed from 9.9 to 8.8
  26. MITRE
    • CVSS severity changed from HIGH to CRITICAL
    • CVSS vector changed from CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H to CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
    • CVSS score changed from 8.8 to 9.9
    • CVSS severity changed from CRITICAL to HIGH
    • CVSS vector changed from CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H to CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
    • CVSS score changed from 9.9 to 8.8
  27. MITRE
    • CVSS severity changed from HIGH to CRITICAL
    • CVSS vector changed from CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H to CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
    • CVSS score changed from 8.8 to 9.9
    • CVSS severity changed from CRITICAL to HIGH
    • CVSS vector changed from CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H to CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
    • CVSS score changed from 9.9 to 8.8
  28. MITRE
    • CVSS severity changed from HIGH to CRITICAL
    • CVSS vector changed from CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H to CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
    • CVSS score changed from 8.8 to 9.9
    • CVSS severity changed from CRITICAL to HIGH
    • CVSS vector changed from CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H to CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
    • CVSS score changed from 9.9 to 8.8
  29. MITRE
    • CVSS severity changed from HIGH to CRITICAL
    • CVSS vector changed from CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H to CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
    • CVSS score changed from 8.8 to 9.9
    • CVSS severity changed from CRITICAL to HIGH
    • CVSS vector changed from CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H to CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
    • CVSS score changed from 9.9 to 8.8
  30. MITRE
    • CVSS severity changed from HIGH to CRITICAL
    • CVSS vector changed from CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H to CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
    • CVSS score changed from 8.8 to 9.9
    • CVSS severity changed from CRITICAL to HIGH
    • CVSS vector changed from CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H to CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
    • CVSS score changed from 9.9 to 8.8
  31. MITRE
    • CVSS severity changed from HIGH to CRITICAL
    • CVSS vector changed from CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H to CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
    • CVSS score changed from 8.8 to 9.9
    • CVSS severity changed from CRITICAL to HIGH
    • CVSS vector changed from CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H to CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
    • CVSS score changed from 9.9 to 8.8
  32. MITRE
    • CVSS severity changed from HIGH to CRITICAL
    • CVSS vector changed from CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H to CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
    • CVSS score changed from 8.8 to 9.9
Sources
CVE.org / MITRE
Status PUBLISHED
Assigner f5
Published Oct 10, 2023
Updated Sep 19, 2024
Reserved Oct 5, 2023
CISA Vulnrichment
Updated Sep 19, 2024
NVD
Status Modified
Modified Jun 17, 2026
Red Hat
Severity n/a
Public date n/a