Lucene search
F5CVE-2020-5902HistoryJul 01, 2020 - 3:15 p.m.
CVE-2020-5902
2020-07-0115:15:15
CWE-22
f5
web.nvd.nist.gov
1559
In Wild
29
24
big-ip
tmui
rce
remote code execution
cve-2020-5902
security vulnerability
CVSS2
10
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AI Score
9.9
Confidence
High
EPSS
0.975
Percentile
100.0%
In BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, the Traffic Management User Interface (TMUI), also referred to as the Configuration utility, has a Remote Code Execution (RCE) vulnerability in undisclosed pages.
Affected configurations
Node
f5big-ip_access_policy_managerRange11.6.1–11.6.5.2
ORf5big-ip_access_policy_managerRange12.1.0–12.1.5.2
ORf5big-ip_access_policy_managerRange13.1.0–13.1.3.4
ORf5big-ip_access_policy_managerRange14.1.0–14.1.2.6
ORf5big-ip_access_policy_managerRange15.0.0–15.0.1.4
ORf5big-ip_access_policy_managerRange15.1.0–15.1.0.4
ORf5big-ip_advanced_firewall_managerRange11.6.1–11.6.5.2
ORf5big-ip_advanced_firewall_managerRange12.1.0–12.1.5.2
ORf5big-ip_advanced_firewall_managerRange13.1.0–13.1.3.4
ORf5big-ip_advanced_firewall_managerRange14.1.0–14.1.2.6
ORf5big-ip_advanced_firewall_managerRange15.0.0–15.0.1.4
ORf5big-ip_advanced_firewall_managerRange15.1.0–15.1.0.4
ORf5big-ip_advanced_web_application_firewallRange11.6.1–11.6.5.2
ORf5big-ip_advanced_web_application_firewallRange12.1.0–12.1.5.2
ORf5big-ip_advanced_web_application_firewallRange13.1.0–13.1.3.4
ORf5big-ip_advanced_web_application_firewallRange14.1.0–14.1.2.6
ORf5big-ip_advanced_web_application_firewallRange15.0.0–15.0.1.4
ORf5big-ip_advanced_web_application_firewallRange15.1.0–15.1.0.4
ORf5big-ip_analyticsRange11.6.1–11.6.5.2
ORf5big-ip_analyticsRange12.1.0–12.1.5.2
ORf5big-ip_analyticsRange13.1.0–13.1.3.4
ORf5big-ip_analyticsRange14.1.0–14.1.2.6
ORf5big-ip_analyticsRange15.0.0–15.0.1.4
ORf5big-ip_analyticsRange15.1.0–15.1.0.4
ORf5big-ip_application_acceleration_managerRange11.6.1–11.6.5.2
ORf5big-ip_application_acceleration_managerRange12.1.0–12.1.5.2
ORf5big-ip_application_acceleration_managerRange13.1.0–13.1.3.4
ORf5big-ip_application_acceleration_managerRange14.1.0–14.1.2.6
ORf5big-ip_application_acceleration_managerRange15.0.0–15.0.1.4
ORf5big-ip_application_acceleration_managerRange15.1.0–15.1.0.4
ORf5big-ip_application_security_managerRange11.6.1–11.6.5.2
ORf5big-ip_application_security_managerRange12.1.0–12.1.5.2
ORf5big-ip_application_security_managerRange13.1.0–13.1.3.4
ORf5big-ip_application_security_managerRange14.1.0–14.1.2.6
ORf5big-ip_application_security_managerRange15.0.0–15.0.1.4
ORf5big-ip_application_security_managerRange15.1.0–15.1.0.4
ORf5big-ip_ddos_hybrid_defenderRange11.6.1–11.6.5.2
ORf5big-ip_ddos_hybrid_defenderRange12.1.0–12.1.5.2
ORf5big-ip_ddos_hybrid_defenderRange13.1.0–13.1.3.4
ORf5big-ip_ddos_hybrid_defenderRange14.1.0–14.1.2.6
ORf5big-ip_ddos_hybrid_defenderRange15.0.0–15.0.1.4
ORf5big-ip_ddos_hybrid_defenderRange15.1.0–15.1.0.4
ORf5big-ip_domain_name_systemRange11.6.1–11.6.5.2
ORf5big-ip_domain_name_systemRange12.1.0–12.1.5.2
ORf5big-ip_domain_name_systemRange13.1.0–13.1.3.4
ORf5big-ip_domain_name_systemRange14.1.0–14.1.2.6
ORf5big-ip_domain_name_systemRange15.0.0–15.0.1.4
ORf5big-ip_domain_name_systemRange15.1.0–15.1.0.4
ORf5big-ip_fraud_protection_serviceRange11.6.1–11.6.5.2
ORf5big-ip_fraud_protection_serviceRange12.1.0–12.1.5.2
ORf5big-ip_fraud_protection_serviceRange13.1.0–13.1.3.4
ORf5big-ip_fraud_protection_serviceRange14.1.0–14.1.2.6
ORf5big-ip_fraud_protection_serviceRange15.0.0–15.0.1.4
ORf5big-ip_fraud_protection_serviceRange15.1.0–15.1.0.4
ORf5big-ip_global_traffic_managerRange11.6.1–11.6.5.2
ORf5big-ip_global_traffic_managerRange12.1.0–12.1.5.2
ORf5big-ip_global_traffic_managerRange13.1.0–13.1.3.4
ORf5big-ip_global_traffic_managerRange14.1.0–14.1.2.6
ORf5big-ip_global_traffic_managerRange15.0.0–15.0.1.4
ORf5big-ip_global_traffic_managerRange15.1.0–15.1.0.4
ORf5big-ip_link_controllerRange11.6.1–11.6.5.2
ORf5big-ip_link_controllerRange12.1.0–12.1.5.2
ORf5big-ip_link_controllerRange13.1.0–13.1.3.4
ORf5big-ip_link_controllerRange14.1.0–14.1.2.6
ORf5big-ip_link_controllerRange15.0.0–15.0.1.4
ORf5big-ip_link_controllerRange15.1.0–15.1.0.4
ORf5big-ip_local_traffic_managerRange11.6.1–11.6.5.2
ORf5big-ip_local_traffic_managerRange12.1.0–12.1.5.2
ORf5big-ip_local_traffic_managerRange13.1.0–13.1.3.4
ORf5big-ip_local_traffic_managerRange14.1.0–14.1.2.6
ORf5big-ip_local_traffic_managerRange15.0.0–15.0.1.4
ORf5big-ip_local_traffic_managerRange15.1.0–15.1.0.4
ORf5big-ip_policy_enforcement_managerRange11.6.1–11.6.5.2
ORf5big-ip_policy_enforcement_managerRange12.1.0–12.1.5.2
ORf5big-ip_policy_enforcement_managerRange13.1.0–13.1.3.4
ORf5big-ip_policy_enforcement_managerRange14.1.0–14.1.2.6
ORf5big-ip_policy_enforcement_managerRange15.0.0–15.0.1.4
ORf5big-ip_policy_enforcement_managerRange15.1.0–15.1.0.4
ORf5ssl_orchestratorRange11.6.1–11.6.5.2
ORf5ssl_orchestratorRange12.1.0–12.1.5.2
ORf5ssl_orchestratorRange13.1.0–13.1.3.4
ORf5ssl_orchestratorRange14.1.0–14.1.2.6
ORf5ssl_orchestratorRange15.0.0–15.0.1.4
ORf5ssl_orchestratorRange15.1.0–15.1.0.4
| Vendor | Product | Version | CPE |
|---|---|---|---|
| f5 | big-ip_access_policy_manager | * | cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:* |
| f5 | big-ip_advanced_firewall_manager | * | cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:* |
| f5 | big-ip_advanced_web_application_firewall | * | cpe:2.3:a:f5:big-ip_advanced_web_application_firewall:*:*:*:*:*:*:*:* |
| f5 | big-ip_analytics | * | cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:* |
| f5 | big-ip_application_acceleration_manager | * | cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:* |
| f5 | big-ip_application_security_manager | * | cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:* |
| f5 | big-ip_ddos_hybrid_defender | * | cpe:2.3:a:f5:big-ip_ddos_hybrid_defender:*:*:*:*:*:*:*:* |
| f5 | big-ip_domain_name_system | * | cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:* |
| f5 | big-ip_fraud_protection_service | * | cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:* |
| f5 | big-ip_global_traffic_manager | * | cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:* |
CNA Affected
[
{
"vendor": "n/a",
"product": "BIG-IP",
"versions": [
{
"version": "15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, 11.6.1-11.6.5.1",
"status": "affected"
}
]
}
]References
packetstormsecurity.com/files/158333/BIG-IP-TMUI-Remote-Code-Execution.html
packetstormsecurity.com/files/158334/BIG-IP-TMUI-Remote-Code-Execution.html
packetstormsecurity.com/files/158366/F5-BIG-IP-TMUI-Directory-Traversal-File-Upload-Code-Execution.html
packetstormsecurity.com/files/158414/Checker-CVE-2020-5902.html
packetstormsecurity.com/files/158581/F5-Big-IP-13.1.3-Build-0.0.6-Local-File-Inclusion.html
packetstormsecurity.com/files/175671/F5-BIG-IP-TMUI-Directory-Traversal-File-Upload-Code-Execution.html
badpackets.net/over-3000-f5-big-ip-endpoints-vulnerable-to-cve-2020-5902/
github.com/Critical-Start/Team-Ares/tree/master/CVE-2020-5902
support.f5.com/csp/article/K52145254
swarm.ptsecurity.com/rce-in-f5-big-ip/
www.criticalstart.com/f5-big-ip-remote-code-execution-exploit/
www.kb.cert.org/vuls/id/290915
Social References
More
Related
ics
ics
Threat Actor Exploitation of F5 BIG-IP CVE-2020-5902
2020-07-24 12:00:00
Iranian Advanced Persistent Threat Actors Threaten Election-Related Systems
2020-10-22 12:00:00
Chinese State-Sponsored Cyber Operations: Observed TTPs
2021-08-20 12:00:00
checkpoint_advisories
checkpoint_advisories
F5 BIG-IP Remote Code Execution (CVE-2020-5902)
2020-07-06 00:00:00
githubexploit
githubexploit
Exploit for Path Traversal in F5 Big-Ip Access Policy Manager
2020-07-09 06:09:39
Exploit for Path Traversal in F5 Big-Ip Access Policy Manager
2020-07-28 00:43:14
Exploit for Path Traversal in F5 Big-Ip Access Policy Manager
2020-07-06 04:03:58
thn
thn
New Cyber Espionage Group Targeting Ministries of Foreign Affairs
2021-06-11 07:01:00
Hackers Target Ukrainian Software Company Using GoMet Backdoor
2022-07-21 12:02:00
Critical F5 BIG-IP Bug Under Active Attacks After PoC Exploit Posted Online
2021-03-20 15:54:00
metasploit
metasploit
F5 BIG-IP TMUI Directory Traversal and File Upload RCE
2023-11-01 20:55:42
packetstorm
packetstorm
F5 Big-IP 13.1.3 Build 0.0.6 Local File Inclusion
2020-07-27 00:00:00
BIG-IP TMUI Remote Code Execution
2020-07-07 00:00:00
F5 BIG-IP TMUI Directory Traversal / File Upload / Code Execution
2020-07-07 00:00:00
prion
prion
Remote code execution
2020-07-01 15:15:00
talosblog
talosblog
New Snort rule addresses critical vulnerability in F5 BIG-IP
2020-07-06 14:19:53
Attackers target Ukraine using GoMet backdoor
2022-07-21 12:00:00
hackerone
hackerone
8x8: F5 BIG-IP TMUI RCE - CVE-2020-5902 (██.packet8.net)
2022-03-23 13:50:18
nessus
nessus
F5 Networks BIG-IP : TMUI RCE (CVE-2020-5902) (Direct Check)
2020-07-06 00:00:00
F5 Networks BIG-IP : TMUI RCE vulnerability (K52145254)
2020-07-01 00:00:00
zdt
zdt
mmpc
mmpc
Web shell attacks continue to rise
2021-02-11 17:00:05
exploitdb
exploitdb
F5 Big-IP 13.1.3 Build 0.0.6 - Local File Inclusion
2020-07-26 00:00:00
dsquare
dsquare
F5 BIG-IP Traffic Management User Interface File Disclosure
2020-07-05 00:00:00
nvd
nvd
CVE-2020-5902
2020-07-01 15:15:15
ptsecurity
ptsecurity
cisa_kev
cisa_kev
trendmicroblog
trendmicroblog
nuclei
nuclei
F5 BIG-IP TMUI - Remote Code Execution
2020-07-05 08:11:58
cisa
cisa
cvelist
cvelist
CVE-2020-5902
2020-07-01 00:00:00
attackerkb
attackerkb
CVE-2020-5902 — TMUI RCE vulnerability
2020-07-01 00:00:00
CVE-2020-15506
2020-07-07 00:00:00
mssecure
mssecure
Web shell attacks continue to rise
2021-02-11 17:00:05
f5
f5
K52145254 : TMUI RCE vulnerability CVE-2020-5902
2020-07-01 00:00:00
securelist
securelist
APT trends report Q3 2021
2021-10-26 10:00:11
DDoS attacks in Q3 2020
2020-10-28 10:00:21
impervablog
impervablog
qualysblog
qualysblog
threatpost
threatpost
Thousands of Vulnerable F5 BIG-IP Users Still Open to Takeover
2020-07-17 20:59:33
Pioneer Kitten APT Sells Corporate Network Access
2020-09-01 13:35:19
Critical F5 BIG-IP Flaw Now Under Active Attack
2021-03-19 20:52:15
kitploit
kitploit
cert
cert
malwarebytes
malwarebytes
Chinese APT's favorite vulnerabilities revealed
2022-10-13 16:15:00
avleonov
avleonov
Joint Advisory AA22-279A and Vulristics
2022-10-21 20:10:13
CVSS2
10
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AI Score
9.9
Confidence
High
EPSS
0.975
Percentile
100.0%
Related for CVE-2020-5902