CVE-2023-43125

published 2023-09-27

CVE-2023-43125: BIG-IP APM clients may send IP traffic outside of the VPN tunnel. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated

Priority P3 41 high 8.2 CVSS 3.1

AV N AC L PR N UI N S U C H I L A N

BIG-IP APM clients may send IP traffic outside of the VPN tunnel. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated

Affected

10 ranges

Vendor	Product	Version range	Fixed in
f5	big-ip_access_policy_manager	—	—
f5	big-ip_access_policy_manager	—	—
f5	big-ip_access_policy_manager	14.1.5.2 – 14.1.5.6	—
f5	big-ip_access_policy_manager	15.1.8 – 15.1.10	—
f5	big-ip_access_policy_manager	16.1.3.3 – 16.1.4	—
f5	big-ip_access_policy_manager_client	—	—
f5	big-ip_access_policy_manager_client	7.2.3 – 7.2.4	—
f5	big-ip_apm	—	—
f5	big-ip_edge_client	>= 7.2.3 < *	*
f5	f5_access	>= 3.0 < *	*

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-319