Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

[CVE-2020-5902] Remote Code Execution in F5 Big‑IP

swarm.ptsecurity.com | vulnerability | CVE-2020-5902 | #rce | #vulnerability-research | #f5 | #big-ip | #tmui | #cve-2020-5902

Summary

Mikhail Klyuchnikov recounts discovering CVE-2020-5902, an unauthenticated RCE rated CVSS 10 in F5 Big-IP's TMUI web interface, with over 8,000 devices exposed on the internet before fixes.
Published
Collected

original ↗

Related coverage

  1. CVE-2022-1388: Scan BIG-IP for Exact Release Versions (bishopfox.com)
  2. Emerging Threat Notification: F5 Networks Vulnerabilities for BIG-IP and BIG-IQ Products (bishopfox.com)
  3. Project Glasswing: What We Learned Running a Frontier Model on Our Own Codebase (hackerone.com)
  4. James Kettle’s ‘autonomous research cascade’, CRLF-powered desync attacks, RCE on humanoid robots – ethical hacker news roundup (yeswehack.com)
  5. Critical remote code execution in vm2, a widely used Node.js sandbox library (about.gitlab.com)
  6. MECCHA CHAMELEON can't hide from the RCE (aikido.dev)

back