Description
F5 BIG-IP是F5公司的一款集成了网络流量编排、负载均衡、智能DNS，远程接入策略管理等功能的应用交付平台。2023年10月27日，官方发布安全公告，披露修复了CVE-2023-46747 F5 BIG-IP TMUI 远程代码执行漏洞，攻击者可构造恶意请求利用请求走私造成远程代码执行。
F5 BIG-IP TMUI 远程代码执行漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://my.f5.com/manage/s/article/K52145254
https://nvd.nist.gov/vuln/detail/CVE-2020-5902
https://zhuanlan.zhihu.com/p/664376608
https://github.com/eeeeeeeeee-code/POC/blob/main/wpoc/F5-BIG-IP/F5%20BIG-IP%20%E8%BF%9C%E7%A8%8B%E4%BB%A3%E7%A0%81%E6%89%A7%E8%A1%8C%E6%BC%8F%E6%B4%9E(CVE-2023-46747).md
https://www.secrss.com/articles/60088
https://avd.aliyun.com/detail?id=AVD-2023-46747
https://cloud.tencent.com/developer/article/2358247
https://zeropath.com/blog/f5-big-ip-cve-2023-46747-authentication-bypass-rce
https://www.f5.com/support/big-ip-vulnerability-cve-2020-5902
https://www.cisa.gov/news-events/cybersecurity-advisories/aa20-206a