← Global Threat Landscape

CVE-2023-46747

CWE-288

Critical

103.7

RPS

Description

Undisclosed requests may bypass configuration utility authentication, allowing an attacker with network access to the BIG-IP system through the management port and/or self IP addresses to execute arbitrary system commands.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated

Source: NVD

Signals

CVSS
9.8
Critical · v3.1
EPSS
96.51%
Probability of exploitation in the next 30 days (FIRST)
CISA KEV
In CISA KEV since Oct 2023
Fix commit
No known fix commit
Sources: MoreFixes, FreshFixes
Weakness
CWE-288
CWE-288, CWE-306
Published
26 Oct 2023
Last modified 27 Oct 2025

How to read these signals: RPS · EPSS · CISA KEV · Data sources

Get this score from the API

curl -H "Authorization: Bearer dsec_live_xxxxxxxx" \
  https://api.intelligence.devsecure.io/api/v1/rps/CVE-2023-46747

Replace the placeholder with your key. Get a free API key or rank your own CVEs.

Data as of 8 Oct 2026, 05:16 UK time