BIG-IP Next SPK SSH vulnerability
CVE-2023-45226

7.4HIGH

Key Information:

Vendor
F5
Status
Big-ip Next Spk
Vendor
CVE Published:
10 October 2023

Summary

The Traffic Management Module (TMM) in F5 BIG-IP products has been found to contain hardcoded credentials within the f5-debug-sidecar and f5-debug-sshd containers. This security flaw allows an attacker who can intercept traffic to impersonate the SPK Secure Shell (SSH) server, posing significant risks when SSH debugging is enabled. Organizations using affected software versions should review their configurations to mitigate potential exploitation of this vulnerability, especially for versions that have not reached End of Technical Support.

Affected Version(s)

BIG-IP Next SPK 1.5.0 < 1.6.0

References

https://my.f5.com/manage/s/article/K000135874
vendor-advisory

CVSS V3.1

Score:
7.4
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

F5
.