严重 F5 BIG-IP TMUI 远程代码执行漏洞（CVE-2023-46747）

CVE编号

CVE-2023-46747

利用情况

EXP 已公开

补丁情况

官方补丁

披露时间

2023-10-27
该漏洞EXP已公开传播，漏洞利用成本极低，建议您立即关注并修复。
漏洞描述
F5 BIG-IP是F5公司的一款集成了网络流量编排、负载均衡、智能DNS，远程接入策略管理等功能的应用交付平台。2023年10月27日，官方发布安全公告，披露修复了CVE-2023-46747 F5 BIG-IP TMUI 远程代码执行漏洞，攻击者可构造恶意请求利用请求走私造成远程代码执行。

影响版本
17.1.0
16.1.0 - 16.1.4
15.1.0 - 15.1.10
14.1.0 - 14.1.5
13.1.0 - 13.1.5


安全版本
17.1.0.3 + Hotfix-BIGIP-17.1.0.3.0.75.4-ENG3
16.1.4.1 + Hotfix-BIGIP-16.1.4.1.0.50.5-ENG3
15.1.10.2 + Hotfix-BIGIP-15.1.10.2.0.44.2-ENG3
14.1.5.6 + Hotfix-BIGIP-14.1.5.6.0.10.6-ENG3
13.1.5.1 + Hotfix-BIGIP-13.1.5.1.0.20.2-ENG3


解决建议
1、利用安全组功能设置其仅对可信地址开放。
2、升级至安全版本及其以上。
参考链接
http://packetstormsecurity.com/files/175673/F5-BIG-IP-TMUI-AJP-Smuggling-Remo...
https://my.f5.com/manage/s/article/K000137353
https://www.secpod.com/blog/f5-issues-warning-big-ip-vulnerability-used-in-ac...
受影响软件情况
# 类型 厂商 产品 版本 影响面
1
运行在以下环境
应用 f5 big-ip_access_policy_manager * From
(including)
13.1.0 		Up to
(including)
13.1.5
运行在以下环境
应用 f5 big-ip_access_policy_manager * From
(including)
14.1.0 		Up to
(including)
14.1.5
运行在以下环境
应用 f5 big-ip_access_policy_manager * From
(including)
15.1.0 		Up to
(including)
15.1.10
运行在以下环境
应用 f5 big-ip_access_policy_manager * From
(including)
16.1.0 		Up to
(including)
16.1.4
运行在以下环境
应用 f5 big-ip_access_policy_manager * From
(including)
17.1.0 		Up to
(including)
17.1.1
运行在以下环境
应用 f5 big-ip_advanced_firewall_manager * From
(including)
13.1.0 		Up to
(including)
13.1.5
运行在以下环境
应用 f5 big-ip_advanced_firewall_manager * From
(including)
14.1.0 		Up to
(including)
14.1.5
运行在以下环境
应用 f5 big-ip_advanced_firewall_manager * From
(including)
15.1.0 		Up to
(including)
15.1.10
运行在以下环境
应用 f5 big-ip_advanced_firewall_manager * From
(including)
16.1.0 		Up to
(including)
16.1.4
运行在以下环境
应用 f5 big-ip_advanced_firewall_manager * From
(including)
17.1.0 		Up to
(including)
17.1.1
运行在以下环境
应用 f5 big-ip_advanced_web_application_firewall * From
(including)
13.1.0 		Up to
(including)
13.1.5
运行在以下环境
应用 f5 big-ip_advanced_web_application_firewall * From
(including)
14.1.0 		Up to
(including)
14.1.5
运行在以下环境
应用 f5 big-ip_advanced_web_application_firewall * From
(including)
15.1.0 		Up to
(including)
15.1.10
运行在以下环境
应用 f5 big-ip_advanced_web_application_firewall * From
(including)
16.1.0 		Up to
(including)
16.1.4
运行在以下环境
应用 f5 big-ip_advanced_web_application_firewall * From
(including)
17.1.0 		Up to
(including)
17.1.1
运行在以下环境
应用 f5 big-ip_analytics * From
(including)
13.1.0 		Up to
(including)
13.1.5
运行在以下环境
应用 f5 big-ip_analytics * From
(including)
14.1.0 		Up to
(including)
14.1.5
运行在以下环境
应用 f5 big-ip_analytics * From
(including)
15.1.0 		Up to
(including)
15.1.10
运行在以下环境
应用 f5 big-ip_analytics * From
(including)
16.1.0 		Up to
(including)
16.1.4
运行在以下环境
应用 f5 big-ip_analytics * From
(including)
17.1.0 		Up to
(including)
17.1.1
运行在以下环境
应用 f5 big-ip_application_acceleration_manager * From
(including)
13.1.0 		Up to
(including)
13.1.5
运行在以下环境
应用 f5 big-ip_application_acceleration_manager * From
(including)
14.1.0 		Up to
(including)
14.1.5
运行在以下环境
应用 f5 big-ip_application_acceleration_manager * From
(including)
15.1.0 		Up to
(including)
15.1.10
运行在以下环境
应用 f5 big-ip_application_acceleration_manager * From
(including)
16.1.0 		Up to
(including)
16.1.4
运行在以下环境
应用 f5 big-ip_application_acceleration_manager * From
(including)
17.1.0 		Up to
(including)
17.1.1
运行在以下环境
应用 f5 big-ip_application_security_manager * From
(including)
13.1.0 		Up to
(including)
13.1.5
运行在以下环境
应用 f5 big-ip_application_security_manager * From
(including)
14.1.0 		Up to
(including)
14.1.5
运行在以下环境
应用 f5 big-ip_application_security_manager * From
(including)
15.1.0 		Up to
(including)
15.1.10
运行在以下环境
应用 f5 big-ip_application_security_manager * From
(including)
16.1.0 		Up to
(including)
16.1.4
运行在以下环境
应用 f5 big-ip_application_security_manager * From
(including)
17.1.0 		Up to
(including)
17.1.1
运行在以下环境
应用 f5 big-ip_application_visibility_and_reporting * From
(including)
13.1.0 		Up to
(including)
13.1.5
运行在以下环境
应用 f5 big-ip_application_visibility_and_reporting * From
(including)
14.1.0 		Up to
(including)
14.1.5
运行在以下环境
应用 f5 big-ip_application_visibility_and_reporting * From
(including)
15.1.0 		Up to
(including)
15.1.10
运行在以下环境
应用 f5 big-ip_application_visibility_and_reporting * From
(including)
16.1.0 		Up to
(including)
16.1.4
运行在以下环境
应用 f5 big-ip_application_visibility_and_reporting * From
(including)
17.1.0 		Up to
(including)
17.1.1
运行在以下环境
应用 f5 big-ip_automation_toolchain * From
(including)
13.1.0 		Up to
(including)
13.1.5
运行在以下环境
应用 f5 big-ip_automation_toolchain * From
(including)
14.1.0 		Up to
(including)
14.1.5
运行在以下环境
应用 f5 big-ip_automation_toolchain * From
(including)
15.1.0 		Up to
(including)
15.1.10
运行在以下环境
应用 f5 big-ip_automation_toolchain * From
(including)
16.1.0 		Up to
(including)
16.1.4
运行在以下环境
应用 f5 big-ip_automation_toolchain * From
(including)
17.1.0 		Up to
(including)
17.1.1
运行在以下环境
应用 f5 big-ip_carrier-grade_nat * From
(including)
13.1.0 		Up to
(including)
13.1.5
运行在以下环境
应用 f5 big-ip_carrier-grade_nat * From
(including)
14.1.0 		Up to
(including)
14.1.5
运行在以下环境
应用 f5 big-ip_carrier-grade_nat * From
(including)
15.1.0 		Up to
(including)
15.1.10
运行在以下环境
应用 f5 big-ip_carrier-grade_nat * From
(including)
16.1.0 		Up to
(including)
16.1.4
运行在以下环境
应用 f5 big-ip_carrier-grade_nat * From
(including)
17.1.0 		Up to
(including)
17.1.1
运行在以下环境
应用 f5 big-ip_container_ingress_services * From
(including)
13.1.0 		Up to
(including)
13.1.5
运行在以下环境
应用 f5 big-ip_container_ingress_services * From
(including)
14.1.0 		Up to
(including)
14.1.5
运行在以下环境
应用 f5 big-ip_container_ingress_services * From
(including)
15.1.0 		Up to
(including)
15.1.10
运行在以下环境
应用 f5 big-ip_container_ingress_services * From
(including)
16.1.0 		Up to
(including)
16.1.4
运行在以下环境
应用 f5 big-ip_container_ingress_services * From
(including)
17.1.0 		Up to
(including)
17.1.1
运行在以下环境
应用 f5 big-ip_ddos_hybrid_defender * From
(including)
13.1.0 		Up to
(including)
13.1.5
运行在以下环境
应用 f5 big-ip_ddos_hybrid_defender * From
(including)
14.1.0 		Up to
(including)
14.1.5
运行在以下环境
应用 f5 big-ip_ddos_hybrid_defender * From
(including)
15.1.0 		Up to
(including)
15.1.10
运行在以下环境
应用 f5 big-ip_ddos_hybrid_defender * From
(including)
16.1.0 		Up to
(including)
16.1.4
运行在以下环境
应用 f5 big-ip_ddos_hybrid_defender * From
(including)
17.1.0 		Up to
(including)
17.1.1
运行在以下环境
应用 f5 big-ip_domain_name_system * From
(including)
13.1.0 		Up to
(including)
13.1.5
运行在以下环境
应用 f5 big-ip_domain_name_system * From
(including)
14.1.0 		Up to
(including)
14.1.5
运行在以下环境
应用 f5 big-ip_domain_name_system * From
(including)
15.1.0 		Up to
(including)
15.1.10
运行在以下环境
应用 f5 big-ip_domain_name_system * From
(including)
16.1.0 		Up to
(including)
16.1.4
运行在以下环境
应用 f5 big-ip_domain_name_system * From
(including)
17.1.0 		Up to
(including)
17.1.1
运行在以下环境
应用 f5 big-ip_fraud_protection_services * From
(including)
13.1.0 		Up to
(including)
13.1.5
运行在以下环境
应用 f5 big-ip_fraud_protection_services * From
(including)
14.1.0 		Up to
(including)
14.1.5
运行在以下环境
应用 f5 big-ip_fraud_protection_services * From
(including)
15.1.0 		Up to
(including)
15.1.10
运行在以下环境
应用 f5 big-ip_fraud_protection_services * From
(including)
16.1.0 		Up to
(including)
16.1.4
运行在以下环境
应用 f5 big-ip_fraud_protection_services * From
(including)
17.1.0 		Up to
(including)
17.1.1
运行在以下环境
应用 f5 big-ip_global_traffic_manager * From
(including)
13.1.0 		Up to
(including)
13.1.5
运行在以下环境
应用 f5 big-ip_global_traffic_manager * From
(including)
14.1.0 		Up to
(including)
14.1.5
运行在以下环境
应用 f5 big-ip_global_traffic_manager * From
(including)
15.1.0 		Up to
(including)
15.1.10
运行在以下环境
应用 f5 big-ip_global_traffic_manager * From
(including)
16.1.0 		Up to
(including)
16.1.4
运行在以下环境
应用 f5 big-ip_global_traffic_manager * From
(including)
17.1.0 		Up to
(including)
17.1.1
运行在以下环境
应用 f5 big-ip_link_controller * From
(including)
13.1.0 		Up to
(including)
13.1.5
运行在以下环境
应用 f5 big-ip_link_controller * From
(including)
14.1.0 		Up to
(including)
14.1.5
运行在以下环境
应用 f5 big-ip_link_controller * From
(including)
15.1.0 		Up to
(including)
15.1.10
运行在以下环境
应用 f5 big-ip_link_controller * From
(including)
16.1.0 		Up to
(including)
16.1.4
运行在以下环境
应用 f5 big-ip_link_controller * From
(including)
17.1.0 		Up to
(including)
17.1.1
运行在以下环境
应用 f5 big-ip_local_traffic_manager * From
(including)
13.1.0 		Up to
(including)
13.1.5
运行在以下环境
应用 f5 big-ip_local_traffic_manager * From
(including)
14.1.0 		Up to
(including)
14.1.5
运行在以下环境
应用 f5 big-ip_local_traffic_manager * From
(including)
15.1.0 		Up to
(including)
15.1.10
运行在以下环境
应用 f5 big-ip_local_traffic_manager * From
(including)
16.1.0 		Up to
(including)
16.1.4
运行在以下环境
应用 f5 big-ip_local_traffic_manager * From
(including)
17.1.0 		Up to
(including)
17.1.1
运行在以下环境
应用 f5 big-ip_policy_enforcement_manager * From
(including)
13.1.0 		Up to
(including)
13.1.5
运行在以下环境
应用 f5 big-ip_policy_enforcement_manager * From
(including)
14.1.0 		Up to
(including)
14.1.5
运行在以下环境
应用 f5 big-ip_policy_enforcement_manager * From
(including)
15.1.0 		Up to
(including)
15.1.10
运行在以下环境
应用 f5 big-ip_policy_enforcement_manager * From
(including)
16.1.0 		Up to
(including)
16.1.4
运行在以下环境
应用 f5 big-ip_policy_enforcement_manager * From
(including)
17.1.0 		Up to
(including)
17.1.1
运行在以下环境
应用 f5 big-ip_ssl_orchestrator * From
(including)
13.1.0 		Up to
(including)
13.1.5
运行在以下环境
应用 f5 big-ip_ssl_orchestrator * From
(including)
14.1.0 		Up to
(including)
14.1.5
运行在以下环境
应用 f5 big-ip_ssl_orchestrator * From
(including)
15.1.0 		Up to
(including)
15.1.10
运行在以下环境
应用 f5 big-ip_ssl_orchestrator * From
(including)
16.1.0 		Up to
(including)
16.1.4
运行在以下环境
应用 f5 big-ip_ssl_orchestrator * From
(including)
17.1.0 		Up to
(including)
17.1.1
运行在以下环境
应用 f5 big-ip_webaccelerator * From
(including)
13.1.0 		Up to
(including)
13.1.5
运行在以下环境
应用 f5 big-ip_webaccelerator * From
(including)
14.1.0 		Up to
(including)
14.1.5
运行在以下环境
应用 f5 big-ip_webaccelerator * From
(including)
15.1.0 		Up to
(including)
15.1.10
运行在以下环境
应用 f5 big-ip_webaccelerator * From
(including)
16.1.0 		Up to
(including)
16.1.4
运行在以下环境
应用 f5 big-ip_webaccelerator * From
(including)
17.1.0 		Up to
(including)
17.1.1
运行在以下环境
应用 f5 big-ip_websafe * From
(including)
13.1.0 		Up to
(including)
13.1.5
运行在以下环境
应用 f5 big-ip_websafe * From
(including)
14.1.0 		Up to
(including)
14.1.5
运行在以下环境
应用 f5 big-ip_websafe * From
(including)
15.1.0 		Up to
(including)
15.1.10
运行在以下环境
应用 f5 big-ip_websafe * From
(including)
16.1.0 		Up to
(including)
16.1.4
运行在以下环境
应用 f5 big-ip_websafe * From
(including)
17.1.0 		Up to
(including)
17.1.1
阿里云评分
9.4
  • 攻击路径
    远程
  • 攻击复杂度
    容易
  • 权限要求
    无需权限
  • 影响范围
    全局影响
  • EXP成熟度
    EXP 已公开
  • 补丁情况
    官方补丁
  • 数据保密性
    N/A
  • 数据完整性
    传输被破坏
  • 服务器危害
    服务器失陷
  • 全网数量
    N/A
CWE-ID 漏洞类型
CWE-288 使用候选路径或通道进行的认证绕过
CWE-306 关键功能的认证机制缺失
阿里云安全产品覆盖情况