VYPR
← All advisories
Medium severity5.4NVD Advisory· Published May 3, 2023· Updated Jun 17, 2026

CVE-2023-29240

CVE-2023-29240

Description

An authenticated attacker granted a Viewer or Auditor role on a BIG-IQ can upload arbitrary files using an undisclosed iControl REST endpoint.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

Affected products

2
  • F5, Inc./Big IPcpe-rescue2 versions
    8.0.0+ 1 more
    • (no CPE)range: 8.0.0
    • (no CPE)

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.