CVE-2024-23603 | F5 BIG-IP Advanced WAF/BIG-IP ASM up to 15.1.9/16.1.3/17.1.0 Configuration Utility sql injection (K000138047)

A vulnerability classified as critical was found in F5 BIG-IP Advanced WAF and BIG-IP ASM up to 15.1.9/16.1.3/17.1.0. Affected by this vulnerability is an unknown functionality of the component Configuration Utility. The manipulation leads to sql injection.

This vulnerability is known as CVE-2024-23603. The attack can be launched remotely. There is no exploit available.

It is recommended to upgrade the affected component.