PT-2023-24981 · F5 · F5 Big-Ip

Published 2023-08-02 · Updated 2023-10-13 · CVE-2023-3470

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions F5 BIG-IP versions (affected versions not specified)

Description The issue concerns F5 BIG-IP platforms with Cavium Nitrox FIPS HSM cards, which generate a deterministic password for the Crypto User account. This predictable password allows an authenticated user with TMSH access to the BIG-IP system, or anyone with physical access to the FIPS HSM, to obtain the information required to generate the correct password. On vCMP systems, all Guests share the same deterministic password, enabling those with TMSH access on one Guest to access keys of a different Guest. The affected BIG-IP hardware platforms include 10350v-F, i5820-DF, i7820-DF, i15820-DF, 5250v-F, 7200v-F, 10200v-F, 6900-F, 8900-F, 11000-F, and 11050-F.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Authentication

Weakness Enumeration

CWE-1391

CWE-287

Related Identifiers

CVE-2023-3470

Affected Products

F5 Big-Ip

References · 4

• https://osv.dev/vulnerability/CVE-2023-3470 · Vendor Advisory
• https://my.f5.com/manage/s/article/K000135449 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-3470 · Security Note
• https://t.me/cibsecurity/67600 · Telegram Post