PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

[CVE-2020-5902] Remote Code Execution in F5 Big‑IP

swarm.ptsecurity.com | vulnerability | CVE-2020-5902 | #rce | #vulnerability-research | #f5 | #big-ip | #tmui | #cve-2020-5902
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Mikhail Klyuchnikov recounts discovering CVE-2020-5902, an unauthenticated RCE rated CVSS 10 in F5 Big-IP's TMUI web interface, with over 8,000 devices exposed on the internet before fixes.
CVE
CVE-2020-5902
Published
Collected

Related coverage

vulnerability · bishopfox.com
CVE-2022-1388: Scan BIG-IP for Exact Release Versions
Bishop Fox released a scanner that fingerprints exact F5 BIG-IP software versions from HTTP responses, helping defenders quickly assess exposure to CVE-2022-1388, a critical auth-bypass RCE.
vulnerability · vercel.com
Reproducing, disclosing, and fixing the libheif vulnerability with Hacktron and the maintainers
How Vercel and Hacktron coordinated a fix for a remote code execution vulnerability that reached Next.js image optimization through sharp, libvips, and libheif.
vulnerability · blog.viettelcybersecurity.com
Cảnh báo chiến dịch khai thác lỗ hổng CVE-2022-1388 trên các hệ thống sử dụng F5 BIG-IP - Phần I
Part one explains CVE-2022-1388: an auth bypass in F5 BIG-IP iControl REST (CVSS 9.8) enabling unauthenticated RCE, dissecting how Apache forwards /mgmt requests to Jetty and token validation fails.
blog · bishopfox.com
Emerging Threat Notification: F5 Networks Vulnerabilities for BIG-IP and BIG-IQ Products
F5 released fixes for seven BIG-IP and BIG-IQ vulnerabilities, headlined by critical unauthenticated RCE CVE-2021-22986 in iControl REST, found by Google's Project Zero; a PoC is public.
research · github.com
Steal My Bitcoin Challenge Writeup: PHP 8.4.26 Session Upload Progress Memory Exhaustion Analysis
Provides a detailed binary-level case study on PHP Zend memory manager behavior and worker state persistence after fatal out-of-memory errors.
research · crowdstrike.com
CrowdStrike Protects Customers from Threats Delivered via PHP2Shell
The Falcon platform provides out-of-the-box visibility and detection coverage for post-exploitation activities of CVE-2026-109618 and CVE-2026-109619.
Back