↓ Skip to main content

CVE-2023-46747 - F5 BIG-IP Configuration utility unauthenticated RCE

··1 min

CVE-2023-46747 is an unauthenticated authentication bypass that can lead to complete compromise of an F5 system with the Traffic Management User Interface (TMUI) exposed. Praetorian’s write-up describes how the vulnerability was identified, the underlying issues that caused the bug, and the steps taken to turn the request smuggling into a critical vulnerability.