CVE-2023-45886

Published: Nov 21, 2023Modified: Jun 17, 2026

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

The BGP daemon (bgpd) in IP Infusion ZebOS through 7.10.6 allow remote attackers to cause a denial of service by sending crafted BGP update messages containing a malformed attribute.

Affected (14)

Products: F5: Big Ip Next, Big Ip Next Service Proxy For Kubernetes, Big Ip Next Cloud Native Network Functions, Big Ip Local Traffic Manager, Big Ip Global Traffic Manager · Ipinfusion: Zebos

5 products

Big Ip Next

Big Ip Next Service Proxy For Kubernetes

Big Ip Next Cloud Native Network Functions

Big Ip Local Traffic Manager

Big Ip Global Traffic Manager

Ipinfusion

1 product

Zebos

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
F5 Big Ip Next	Version 20.0.1

Configuration B

1 vulnerable

Vulnerable Software	Affected Versions
F5 Big Ip Next Service Proxy For Kubernetes	From 1.5.0 to 1.8.2

Configuration C

1 vulnerable

Vulnerable Software	Affected Versions
F5 Big Ip Next Cloud Native Network Functions	From 1.1.0 to 1.1.1

Configuration D

5 vulnerable

Vulnerable Software	Affected Versions
F5 Big Ip Local Traffic Manager	From 13.1.0 to 13.1.5
F5 Big Ip Local Traffic Manager	From 14.1.0 to 14.1.5
F5 Big Ip Local Traffic Manager	From 15.1.0 to 15.1.10
F5 Big Ip Local Traffic Manager	From 16.1.0 to 16.1.4
F5 Big Ip Local Traffic Manager	From 17.1.0 to 17.1.1

Configuration E

5 vulnerable

Vulnerable Software	Affected Versions
F5 Big Ip Global Traffic Manager	From 13.1.0 to 13.1.5
F5 Big Ip Global Traffic Manager	From 14.1.0 to 14.1.5
F5 Big Ip Global Traffic Manager	From 15.1.0 to 15.1.10
F5 Big Ip Global Traffic Manager	From 16.1.0 to 16.1.4
F5 Big Ip Global Traffic Manager	From 17.1.0 to 17.1.1