CVE-2023-45886

3 documents3 sources
Severity
7.5HIGH
EPSS
0.3%
top 45.54%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
6
F5 Big-ip Global Traffic ManagerF5 Big-ip Local Traffic ManagerF5 Big-ip Next Cloud-native Network Functions+3 more
Timeline
PublishedNov 21

Description

The BGP daemon (bgpd) in IP Infusion ZebOS through 7.10.6 allow remote attackers to cause a denial of service by sending crafted BGP update messages containing a malformed attribute.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HExploitability: 3.9 | Impact: 3.6

Affected Packages6 packages

▶NVDipinfusion/zebos7.10.6
▶NVDf5/big-ip_next_service_proxy1.5.0 — 1.8.2
▶NVDf5/big-ip_local_traffic_manager13.1.0 — 13.1.5+4
▶NVDf5/big-ip_global_traffic_manager13.1.0 — 13.1.5+4

🔴Vulnerability Details

2
GHSA
GHSA-rwrc-24vx-qh33: The BGP daemon (bgpd) in IP Infusion ZebOS through 7↗2023-11-21
▶
CVEList
CVE-2023-45886: The BGP daemon (bgpd) in IP Infusion ZebOS through 7↗2023-11-21
▶