CVE-2023-46747: F5 BIG-IP - Unauthenticated RCE via AJP Smuggling

HoneyLabs honeypots recorded 17 probes matching CVE-2023-46747 from 5 distinct source IP addresses in the last 7 days. Severity is rated critical.

This CVE is on CISA's Known Exploited Vulnerabilities list.

Request paths that identify it

  • /tmui/login.jsp
  • /mgmt/tm/auth/user

Addresses probing it

Source IPProbesNetworkCountry
94.154.43.76Storm Industries LLCThe Netherlands
185.146.233.1964FlokiNET ehfIceland
193.221.201.1423ALINDA LLCRussia
151.240.151.873Dedik Services LimitedGermany
151.240.151.911Dedik Services LimitedGermany

Networks it comes from

ASNOrganisationProbesSource IPs
AS219502Storm Industries LLC61
AS207043Dedik Services Limited42
AS200651FlokiNET ehf41
AS209946ALINDA LLC31

Captured requests

  • /tmui/login.jsp

CVE report

CVE report

Open a specific CVE from the CVE tracker.