# MA-982.112023: MyCERT Advisory - Critical Vulnerability in F5 BIG-IP Product

**Date:** 02 Nov 2023  
**Source:** https://www.mycert.org.my/portal/advisory?id=MA-982.112023  
**Advisory ID:** MA-982.112023

---

**1.0 Introduction**
MyCERT has observed a critical vulnerability in the F5 BIG-IP product that could be exploited to execute malicious code on vulnerable systems.
The F5 BIG-IP Configuration Utility contains an unauthenticated remote code execution (RCE) vulnerability that allows an attacker with network access to the BIG-IP system through the management port and/or self IP addresses to execute arbitrary system commands. The vulnerability is caused by an improper authentication mechanism in the Configuration Utility.
**2.0 Impact**
Successful exploitation could allow a threat actor to execute arbitrary system commands on the BIG-IP system by sending specially crafted HTTP requests to the BIG-IP system.
**3.0 Affected Products**
- BIG-IP (all modules)
- 17.1.0
- 16.1.0 - 16.1.4
- 15.1.0 - 15.1.10
- 14.1.0 - 14.1.5
- 13.1.0 - 13.1.5
**4.0 Recommendations**
MyCERT recommends upgrading affected versions to the fixed or most recent version released by F5. Kindly refer to the following link for more information:
<https://my.f5.com/manage/s/article/K000137353>
Generally, MyCERT advises the users of this devices to be updated with the latest security announcements by the vendor and follow best practice security policies to determine which updates should be applied.
For further enquiries, please contact MyCERT through the following channels:
E-mail: cyber999[at]cybersecurity.my 
Phone: 1-300-88-2999 (monitored during business hours) 
Mobile: +60 19 2665850 (24x7 call incident reporting) 
Business Hours: Mon - Fri 09:00 -18:00 MYT 
Web: <https://www.mycert.org.my> 
Twitter: <https://twitter.com/mycert> 
Facebook: <https://www.facebook.com/mycert.org.my>
**5.0    References**
- <https://my.f5.com/manage/s/article/K000137353>
- <https://www.cisa.gov/news-events/alerts/2023/10/31/cisa-adds-two-known-exploited-vulnerabilities-catalog>