CVE-2023-38419

MediumCVSS 4.3/10Last modified Jun 17, 2026

Description

An authenticated attacker with guest privileges or higher can cause the iControl SOAP process to terminate by sending undisclosed requests. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

Metrics

CVSS 3.1 4.3/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

Weakness enumeration

CWE-755

Affected software

Vendor	Product	Versions
F5	BIG-IP	>= 17.1.0, < 17.1.0.2; >= 16.1.0, < 16.1.3.5; >= 15.1.0, < 15.1.9.1; >= 14.1.0, < 14.1.5.5; >= 13.1.0, < *
F5	BIG-IQ	>= 8.2.0, < ; >= 8.3.0, <

References

https://my.f5.com/manage/s/article/K000133472Vendor Advisory
https://my.f5.com/manage/s/article/K000133472Vendor Advisory

Timeline

Published: Aug 2, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-38427.8A vulnerability was found in Pointware EasyInventory 1.0.12.0 and classified as critical. This issue affects some unknown processing of the CVE-2023-384203.8Improper conditions check in Intel(R) Power Gadget software for macOS all versions may allow an authenticated user to potentially enable inf CVE-2023-384215.5The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.5, macOS Monterey 12.6.8. Processing a 3D model may re CVE-2023-384227.5Walchem Intuition 9 firmware versions prior to v4.21 are missing authentication for some of the API routes of the management web server. Thi CVE-2023-384235.4A cross-site scripting (XSS) vulnerability exists in an undisclosed page of the BIG-IP Configuration utility that allows an attacker to run CVE-2023-384247.8The issue was addressed with improved memory handling. This issue is fixed in iOS 16.6 and iPadOS 16.6, macOS Ventura 13.5. An app may be ab CVE-2023-384257.2The issue was addressed with improved memory handling. This issue is fixed in iOS 16.6 and iPadOS 16.6, macOS Ventura 13.5. An app may be ab CVE-2023-384269.1An issue was discovered in the Linux kernel before 6.3.4. ksmbd has an out-of-bounds read in smb2_find_context_vals when create_context's na CVE-2023-384279.8An issue was discovered in the Linux kernel before 6.3.8. fs/smb/server/smb2pdu.c in ksmbd has an integer underflow and out-of-bounds read i CVE-2023-384289.1An issue was discovered in the Linux kernel before 6.3.4. fs/ksmbd/smb2pdu.c in ksmbd does not properly check the UserName value because it CVE-2023-384299.8An issue was discovered in the Linux kernel before 6.3.4. fs/ksmbd/connection.c in ksmbd has an off-by-one error in memory allocation (becau CVE-2023-38436.1A vulnerability was found in mooSocial mooDating 1.2. It has been classified as problematic. Affected is an unknown function of the file /ma