We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.

Please see our statement on Data Privacy.

Crisp.chat (Helpdesk and Chat)

Ok

THREATINT
PUBLISHED

CVE-2023-36858

BIG-IP Edge Client for Windows and macOS vulnerability



Description

An insufficient verification of data vulnerability exists in BIG-IP Edge Client for Windows and macOS that may allow an attacker to modify its configured server list.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

Reserved 2023-07-17 | Published 2023-08-02 | Updated 2024-10-17 | Assigner f5


HIGH: 7.1CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

Problem types

CWE-345 Insufficient Verification of Data Authenticity

Product status

Default status
unknown

7.2.3 before 7.2.4.3
affected

Credits

F5 acknowledges Gianluca Palma of Engineering Ingegneria Informatica S.p.A. for bringing this issue to our attention and following the highest standards of coordinated disclosure. finder

References

my.f5.com/manage/s/article/K000132563 vendor-advisory

cve.org (CVE-2023-36858)

nvd.nist.gov (CVE-2023-36858)

Download JSON

Share this page
https://cve.threatint.com/CVE/CVE-2023-36858

Support options

Helpdesk Chat, Email, Knowledgebase
Telegram Chat
Subscribe to our newsletter to learn more about our work.