CVE-2023-45886

published 2023-11-21

CVE-2023-45886: The BGP daemon (bgpd) in IP Infusion ZebOS through 7.10.6 allow remote attackers to cause a denial of service by sending crafted BGP update messages containing…

Priority P3 35 high 7.5 CVSS 3.1

AV N AC L PR N UI N S U C N I N A H

The BGP daemon (bgpd) in IP Infusion ZebOS through 7.10.6 allow remote attackers to cause a denial of service by sending crafted BGP update messages containing a malformed attribute.

Affected

14 ranges

Vendor	Product	Version range	Fixed in
f5	big-ip_global_traffic_manager	13.1.0 – 13.1.5	—
f5	big-ip_global_traffic_manager	14.1.0 – 14.1.5	—
f5	big-ip_global_traffic_manager	15.1.0 – 15.1.10	—
f5	big-ip_global_traffic_manager	16.1.0 – 16.1.4	—
f5	big-ip_global_traffic_manager	17.1.0 – 17.1.1	—
f5	big-ip_local_traffic_manager	13.1.0 – 13.1.5	—
f5	big-ip_local_traffic_manager	14.1.0 – 14.1.5	—
f5	big-ip_local_traffic_manager	15.1.0 – 15.1.10	—
f5	big-ip_local_traffic_manager	16.1.0 – 16.1.4	—
f5	big-ip_local_traffic_manager	17.1.0 – 17.1.1	—
f5	big-ip_next	—	—
f5	big-ip_next_cloud-native_network_functions	1.1.0 – 1.1.1	—
f5	big-ip_next_service_proxy_for_kubernetes	1.5.0 – 1.8.2	—
ipinfusion	zebos	<= 7.10.6	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.